IoTeX ioTube bridge exploit on 2026-02-21 ($4.4M reported)
Bridge exploit on Ethereum, 21 Feb 2026. Reported loss $4.4M. Last verified 4 Nov 2026.
notable
Reported loss
$4.4M
as reported by the sources
Recovered
Not in USD
over 86% of the minted CIOTX locked or being frozen
Status
Unknown
updated 26 Oct 2026
Date
Ethereum, other
Summary
On 2026-02-21 an attacker compromised the owner account of the ioTube bridge validator contract on Ethereum, minted 410M CIOTX and drained approximately $4.4M in tokens from the bridge reserves. IoTeX said over 86% of the minted tokens were locked or being frozen and pledged to compensate affected users in full.
- Protocol
- IoTeX ioTube
- Type
- Bridge exploit
- Reported loss
- $4,400,000 · as stated: 410M CIOTX minted and approximately $4.4M drained source: iotex.io ↗
- Recovered
- over 86% of the minted CIOTX locked or being frozen
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | February 21, 2026 | iotex.io ↗ |
| Amount (USD) | 410M CIOTX minted; approximately $4.4M drained | iotex.io ↗ |
| Recovered | over 86% of minted tokens locked or being frozen | iotex.io ↗ |
| Compensation | 100% compensation pledged | iotex.io ↗ |
Primary sources
- IoTeX: ioTube bridge exploit and recovery roadmap ↗ post-mortem · accessed 2026-11-04
- IoTeX: ioTube incident update no. 3, compensation plan ↗ official announcement · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram