Hedera Suffers $5.25 Million Security Breach Through LayerZero Cross-Chain Bridge

The Hedera network has suffered a significant security breach, with an attacker making off with $5.25 million in funds. The exploit occurred on July 11, when blockchain security firms PeckShield and Specter flagged suspicious activity involving the movement of assets from Hedera's mainnet to Ethereum through a LayerZero cross-chain bridge.

The attacker initially funded an Ethereum wallet with 1 ETH routed through Tornado Cash, before bridging assets from Hedera using LayerZero's technology. Once on Ethereum, the attacker swapped Wrapped Bitcoin for Ether, consolidating the stolen funds into more liquid assets.

At the time of detection, the attacker's Ethereum wallet held approximately 2,360 ETH valued at $4.25 million, along with 15.58 WBTC worth around $1 million. The Hedera network itself has not confirmed the exploit, and on-chain investigators are still analyzing transaction data to determine the vulnerability that was exploited.

This is not the first time Hedera has faced a security breach, having experienced an exploit in March 2023 affecting decentralized exchange liquidity pools through a bug in Hedera Token Service transfers. The 2026 landscape has been marked by several high-profile security failures, including a $6 million exploit on Summer.fi and a governance attack on BONK DAO resulting in $20 million in losses.