$5M Hedera exploit triggers audit scrutiny as hacker cashes out on Ethereum

• Attacker steals $5 million from Hedera, rapidly launders funds to Ethereum via LayerZero
• Hedera’s audit limitations draw criticism as HBAR market cap drops nearly 4%

On July 11, 2026 (UTC), CoinDesk reported that an attacker exploited the Hedera blockchain, stealing over $5 million before transferring the funds to Ethereum in one of the network’s largest security incidents to date. The hacker bridged stolen assets through LayerZero and swapped them for ETH, according to blockchain traces from Specter, PeckShieldAlert, and @0xNox.

Security researchers struggled to track the movement of funds due to Hedera’s unique hashgraph protocol and the limitations of its official block explorer. Onchain analysts, including ZachXBT, sharply criticized the forensic barriers, likening Hedera to a “privacy chain” and questioning its transparency following the heist.

The exploit reignited debate around Hedera’s suitability for enterprise use, especially in light of recent high-profile council endorsements from McLaren Racing and Accenture. The resulting uncertainty was reflected in HBAR’s price action and capital outflows: HBAR slipped 4% to approximately $0.068, while market capitalization dropped 3.9% to $2.98 billion, per CoinMarketCap data.

As of July 11, 2026, 15:09 UTC, HBAR trades at $0.069 (-0.865% 24h), and Ethereum (ETH) at $1,812.88 (+1.333% 24h), according to CoinMarketCap. Hedera had not released an official statement at press time, as the community debated the project’s transparency, security guarantees, and resilience.