I just saw that IoTeX experienced a pretty serious incident. It seems there was a private key leak that allowed someone to access the network's treasury funds. We're talking about approximately $4.3 million in assets that were taken in a single hit.

What stands out the most is how they did it. The attacker managed to transfer multiple tokens from different contracts: USDC, USDT, IOTX, PAYG, WBTC, and BUSD. Basically draining multiple vaults using what appears to be direct access to the admin private key.

On-chain analyst Specter was the one who raised the alarm about this. After the assets were stolen, the attacker converted them to Ethereum and moved around 45 ETH through a bridge to Bitcoin. The typical strategy of trying to mix funds across different networks.

What's interesting is that the attacker's address is already identified and under analysis. This is a reminder of how critical it is to protect private keys at the administrative level. A single compromised access to the right key can mean millions lost. The incident is still under investigation, but it’s definitely one of those moments that sparks conversations about security in the industry.