Cash

Ethereum

Truebit

Tornado Cash

Tornado

The Truebit Protocol was hacked on Thursday, as on-chain data showed that an anonymous wallet (0x6C8EC8f1) received approximately 8,535 ETH. The hack resulted in an estimated loss of approximately $26.44 million at current Ethereum prices.
Blockchain security platform Cyvers flagged the suspicious on-chain transaction, stating that its real-time monitoring systems had detected the transfer. The security firm said the transaction triggered alerts due to unusual behavioral patterns.&nbsp;
<h3 id="span-style-font-weight-400-cyvers-says-truebit-s-transaction-meets-its-criteria-for-anomalous-behavior-span">Cyvers says Truebit’s transaction meets its criteria for anomalous behavior</h3>
<blockquote class="twitter-tweet">
 It appears Truebit(<a href="https://twitter.com/Truebitprotocol?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">@Truebitprotocol</a>) has been exploited, with 8,535 <a href="https://twitter.com/search?q=%24ETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">$ETH</a> ($26.44M) stolen. 🚨<a href="https://t.co/jvj8lVkfTM" rel="noopener noreferrer nofollow">https://t.co/jvj8lVkfTM</a> <a href="https://t.co/22Q58vdzvN" rel="noopener noreferrer nofollow">pic.twitter.com/22Q58vdzvN</a>
 — Lookonchain (@lookonchain) <a href="https://twitter.com/lookonchain/status/2009303499927154909?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">January 8, 2026</a>
</blockquote>

Cyvers also acknowledged that its system’s detection models identified elevated risk indicators in the transaction. The security platform argued that the transfers were inconsistent with typical transactions associated with Truebit.
Initial findings found that more than 8,500 ETH was withdrawn from Truebit in a single transaction. Cyvers also revealed that approximately 50% of the funds moved through Tornado Cash in a short period of time.
Truebit Protocol <a href="https://x.com/i/status/2009328032813850839" rel="noopener noreferrer nofollow">acknowledged</a> that it’s aware of the security threat incident involving one or more malicious actors. The firm has not issued an official explanation regarding the purpose of the transaction, but has confirmed that it is in contact with law enforcement to address the situation.
Truebit verifies complex computations off-chain, preventing the execution of heavy calculations on Ethereum. The firm then verifies the correctness of the calculations using cryptography.
Cyvers <a href="https://x.com/CyversAlerts/status/2009305178277654894?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E2009305178277654894%7Ctwgr%5E02aac77c1b14d94522fcc7746069b3eda1f04311%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fbeincrypto.com%2Ftruebit-protocol-ethereum-hack%2F" rel="noopener noreferrer nofollow">revealed</a> that it continues to monitor the address, seeking to identify potential related transactions associated with the movement of the funds. The security firm didn’t confirm the activity as a hack but maintained that the transaction was marked as anomalous activity.
The incident immediately caused a 100% drop in the price of TRU. At the time of publication, the asset is trading at $0.072.
2025 was a record-breaking year for crypto crime; however, last month recorded a 60% drop in losses from hacks and cybersecurity incidents. Blockchain security firm Peckshield <a href="https://x.com/PeckShieldAlert/status/2006716067712782819?s=20" rel="noopener noreferrer nofollow">reported</a> that the losses declined from $194.2 million in November to $76 million in December.
The security firm <a href="https://www.cryptopolitan.com/crypto-hack-losses-drop-60-in-december/" rel="noopener noreferrer nofollow">revealed</a> that last month saw only two major losses, including $50 million stolen from a wallet through address poisoning. The attackers generated identical addresses similar to those with which the victim had previously engaged, then worked to poison the victim’s transaction history. The perpetrators trick the victim into mistakenly sending digital assets to the lookalike address. The other loss resulted from an incident in which attackers drained more than $27.3 million from a single wallet due to a private key leak.
<h3 id="span-style-font-weight-400-chainalysis-reports-an-increase-in-crypto-crime-in-2025-span">Chainalysis reports an increase in crypto crime in 2025</h3>
Chainalysis <a href="https://www.cryptopolitan.com/illegal-crypto-dealings-hit-154b-amid-surge/" rel="noopener noreferrer nofollow">revealed</a> in its end-of-year report that the crypto space recorded over $3.4 billion in digital asset theft from January to December 2025. The firm also acknowledged that Bybit’s February hack by the North Korean hacker group, Lazarus, accounted for $1.5 billion of the total.&nbsp;
DRP-linked hackers are believed to have stolen approximately $2 billion in 2025 alone. The analytics firm acknowledged that North Korean hackers have been the most destructive yet in the past year.
Chainalysis also <a href="https://www.chainalysis.com/blog/2026-crypto-crime-report-introduction/" rel="noopener noreferrer nofollow" target="_blank">reported</a> that illegal digital asset addresses received approximately $154 billion in transactions last year. The amount represents a 162% increase year-over-year. The analytics firm argued that the surge was mainly driven by a 694% rise in the value received by sanctioned entities.&nbsp;
Chainalysis found that there’s a shift in the types of assets involved in illegal crypto activities. The firm revealed that stablecoins are the most preferred assets for crypto crime. According to the report, blockchain-based dollars account for 84% of all illicit transaction volume.&nbsp;
The analytics company also reported that illicit actors are increasingly relying on infrastructure providers, including domain registrars and bulletproof hosting services, to partake in illegal cyber activity. Chainalysis believes the totals of crypto crime will be higher a year from now as the firm continues to incorporate historical data into its estimates.
The smartest crypto minds already read our newsletter. Want in? <a href="https://www.cryptopolitan.com/newsletters/?utm_source=cp&amp;utm_medium=web&amp;utm_campaign=inlineAds" target="_blank" rel="noopener noreferrer nofollow">Join them</a>.

Truebit was allegedly hacked, and 8,535 ETH, worth more than $26 million, was transferred to an anonymous wallet

Table of Contents

Cryptopolitan_News

Other articles published on Jan 9, 2026

Join our free newsletter for daily crypto updates!