Blockchain security firm SlowMist recently reported a significant hack involving an Indonesian crypto exchange. The attackers stole over $22 million in digital assets from Indodax.

The hack targeted the exchange's hot wallets across several blockchains. This includes Bitcoin (BTC), TRON (TRX), Ethereum (ETH), and Ethereum layer-2s like Polygon (POL) and Optimism (OP).

According to SlowMist, the hackers took around $14.6 million in ETH, $1.4 million in BTC, $2.5 million in POL, and $894,000 in OP. They also stole smaller amounts of USDC, USDT, Shiba Inu (SHIB), and Chainlink (LINK).

SlowMist's analysis suggests that the attackers likely compromised the exchange's withdrawal system. They stated, “We can rule out the possibility that the hot wallet has been compromised. It is possible that the withdrawal system has been hacked.”

The hacker withdrew funds using whole numbers, like 1 BTC or 3 BTC. The remaining Bitcoin from these transactions was sent to various addresses as change.

Cybersecurity platform Cyvers noted that the address linked to the hacker is swapping stolen tokens for ETH. They reported, “Our system has detected multiple suspicious transactions involving [Indodax] wallets on different networks. The suspicious address already holds $14.4 million USD and is swapping the tokens to Ether.”

As of now, Ethereum is trading at $2,337, showing a slight increase over the past 24 hours.