Bitcoin Hashrate Hijack: 13 EHs Diverted to OCEAN Mining Pool

A significant security breach has affected the Bitcoin (BTC) mining network, resulting in the temporary hijacking of approximately 13 EH/s of computing power. According to reports from infrastructure provider CoreX Hosting, unidentified actors managed to redirect massive quantities of hashing power to the OCEAN mining pool. The incident highlights ongoing vulnerabilities in centralized hosting environments and the potential for large-scale hashpower theft within the proof-of-work ecosystem.

Scale and Mechanics of the Hashrate Diversion

Data provided by CoreX Hosting via the X platform indicates that the hijacked resources were pointed toward a specific attacker-controlled Bitcoin address: bc1qphukp9rjfc4rcej7erpm9ae20xmtspw8pcddrr. At its peak, the stolen hashrate reached 13 exahashes per second (EH/s), a figure representing a non-negligible percentage of the total global Bitcoin network hashrate.

The technical details of the breach involve several key observations:

• The hashrate eventually stabilized and dropped to approximately 100 PH/s as the attack subsided.
• The specific software or exploit utilized to redirect the mining machines has not yet been publicly disclosed by investigators.
• On-chain records indicate that the attacker's address has not yet received any block rewards or payouts from the OCEAN pool.

Impact on Mining Infrastructure and Security

The temporary redirection of 13 EH/s suggests a coordinated effort targeting managed hosting services rather than individual retail miners. OCEAN, a non-custodial mining pool known for its transparent payout structures, became the unintended recipient of this diverted power. While the immediate threat appears to have been mitigated, the incident raises questions regarding the security protocols of third-party hosting providers.

The hashrate of this address was once around 13 EH/s, and has since dropped to about 100 PH/s. The attack appears to have ended, but the involved program has not yet been disclosed.

This event underscores the importance of stratum protocol security and the need for rigorous monitoring of mining rig configurations. As the Bitcoin network continues to reach new all-time highs in difficulty and hashrate, the incentive for sophisticated "hashjacking" operations increases. Stakeholders are advised to monitor their connection logs and ensure that firmware and management interfaces are protected against unauthorized remote access.