{"investigation":{"slug":"orbit-bridge","entity_name":"Orbit Bridge","trust_score":53,"severity_base":53,"score_modifier":0,"confidence":1,"status":"under_investigation","content_type":"investigation","summary":"Orbit Bridge is the cross-chain bridging protocol of Orbit Chain, developed by South Korean blockchain company Ozys. On December 31, 2023, an attacker who controlled seven of ten multisig signers drained approximately $81.5 million in ETH, WBTC, USDT, USDC and DAI from its Ethereum vault; analysts have alleged links to North Korea's Lazarus Group, and Ozys alleges its former chief information security officer weakened the company firewall before the attack, though neither claim has been confirmed by authorities or a court. Most of the stolen funds have since been laundered through Tornado Cash, and no material recovery had been reported as of mid-2025.","sections":[{"content":"Orbit Bridge is the cross-chain interoperability protocol of Orbit Chain, a proof-of-stake cross-chain project developed by Ozys, a South Korean blockchain technology company founded in 2017 that operates under the motto 'Connecting the Unconnected.' Orbit Chain launched in 2018 with the stated goal of enabling multi-chain asset transfers across networks including Bitcoin, Ethereum, Ripple, Tron, Klaytn and ICON. The CEO of Ozys is TK Taekyu Park, who previously held roles at Samsung. Ozys also operates other DeFi products including KLAYswap and Belt Finance, joined the Klaytn Governance Council, and at one point held a strategic partnership with Alameda Research, which ended with Alameda's insolvency in late 2022. Orbit Bridge has supported the bridging of more than $3.5 billion in assets over its lifetime and, before the December 2023 exploit, was integrated with South Korean ecosystems including Kakao's Klaytn and Wemade's gaming blockchain WEMIX. Its Ethereum vault was governed by a multisig wallet described as ten-of-ten. Total value locked at the time of the exploit stood at approximately $152 million.","heading":"Background: Ozys, Orbit Chain and Orbit Bridge","sources":[{"url":"https://www.coindesk.com/business/2024/01/02/orbit-chain-loses-81m-in-cross-chain-bridge-exploit","name":"CoinDesk","type":"news_article","credibility":3},{"url":"https://blockworks.co/news/80-million-lost-orbit-bridge","name":"Blockworks","type":"news_article","credibility":3},{"url":"https://www.newsbtc.com/news/company/ton-foundation-bolsters-drive-to-a-cross-chain-future-together-with-ozys-orbit-bridge/","name":"NewsBTC","type":"news_article","credibility":3},{"url":"https://www.cypherhunter.com/en/p/ozys/","name":"CypherHunter: Ozys profile","type":"other","credibility":3},{"url":"https://medium.com/orbit-chain/hashed-ozys-ad5aeade42ed","name":"Orbit Chain (Medium): Hashed / Ozys","type":"official","credibility":3},{"url":"https://medium.com/orbit-chain/alameda-research-strategically-partners-with-orbit-chain-b88d1021c9f5","name":"Orbit Chain (Medium): Alameda Research partnership","type":"official","credibility":3},{"url":"https://orbitchain.io/","name":"Orbit Chain official site","type":"official","credibility":3}],"severity":"low"},{"content":"On December 31, 2023 (January 1, 2024 in Korea), an unidentified attacker drained Orbit Bridge's Ethereum vault. Reports differ on the start time and number of transactions: according to Rekt News, Bitcoin.com News, BankInfoSecurity and The Record, five unauthorized withdrawals began at approximately 21:08 UTC, with the final USDT transaction completing at approximately 21:25 UTC; according to Cointelegraph, CoinDesk, Crypto Briefing and Orbit Chain's official statement, six sequential transactions began at approximately 20:52 UTC (05:52 KST) and completed by 06:25 KST. The attacker had pre-funded an intermediary wallet with 10 ETH sourced from Tornado Cash, a sanctioned mixing service. The stolen assets were 9,500 ETH, 231 WBTC (approximately $9.8 million), 30 million USDT, 10 million USDC and 10 million DAI, a total of approximately $81.5 million to $82 million; the ETH portion is valued at approximately $21.5 million in some reports and approximately $21.7 million in others. Funds were distributed across eight freshly created wallets, and the stablecoins and WBTC were partly swapped into ETH (with DAI retained). The development team was notified at 07:05 KST and the Ethereum vault/bridge contract was shut down at 07:21 KST (approximately 22:21 UTC on December 31). Orbit Chain confirmed the exploit publicly on January 1, 2024. Reports differ on its share of protocol funds and its ranking: one account describes it as approximately 35 percent of TVL, while the stated TVL of approximately $152 million implies over half; it was described both as the ninth-largest cross-chain bridge hack recorded at the time and as the largest crypto bridge exploit on record for that period, and as the largest crypto hack of New Year's Eve 2023. Orbit Chain attempted to communicate with the attacker through on-chain messages and asked major global exchanges to freeze the stolen assets.","heading":"December 31, 2023 exploit","sources":[{"url":"https://news.bitcoin.com/orbit-bridge-hack-confirmed-over-81-5-million-lost-in-cryptocurrency-assets/","name":"Bitcoin.com News","type":"news_article","credibility":3},{"url":"https://rekt.news/orbit-bridge-rekt","name":"Rekt News","type":"research","credibility":3},{"url":"https://www.bankinfosecurity.com/cryptohack-roundup-orbit-chains-81m-new-years-eve-hack-a-24028","name":"BankInfoSecurity","type":"news_article","credibility":3},{"url":"https://therecord.media/korean-police-investigating-cryptocurrency-theft-orbit-chain","name":"The Record","type":"news_article","credibility":3},{"url":"https://cointelegraph.com/news/cross-chain-protocol-orbit-bridge-suffers-exploit-hack","name":"Cointelegraph","type":"news_article","credibility":3},{"url":"https://www.coindesk.com/business/2024/01/02/orbit-chain-loses-81m-in-cross-chain-bridge-exploit","name":"CoinDesk","type":"news_article","credibility":3},{"url":"https://medium.com/orbit-chain/official-statement-regarding-orbit-bridge-exploit-551928f3dc52","name":"Orbit Chain (Medium): Official statement regarding Orbit Bridge exploit","type":"official","credibility":3},{"url":"https://cryptobriefing.com/orbit-chain-exploited-816-million-drained-cross-chain-bridge/","name":"Crypto Briefing","type":"news_article","credibility":3}],"severity":"critical"},{"content":"The exploit required control of at least seven of the ten multisig signers governing the Ethereum vault, which was sufficient to authorize withdrawals; early analyst assessments, including from on-chain researcher Officer CIA, indicated a high likelihood that exactly seven of ten signers were compromised. Both source pages describe the vault's multisig as 'ten-of-ten' while also stating that seven signatures sufficed, an inconsistency the sources do not resolve. Ozys stated the exploit did not result from a vulnerability in the Orbit Bridge smart contract or from the theft of a validator key. Security researchers noted that the multisig's real-world protection may have been undermined if private keys were stored on the same systems, protected by identical credentials, or accessible to a single insider, negating the separation-of-duties guarantee a multisig is intended to provide. No independent security audit finding has been publicly cited as having identified or prevented the key-compromise vector.","heading":"Attack method: multisig key compromise","sources":[{"url":"https://rekt.news/orbit-bridge-rekt","name":"Rekt News","type":"research","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-orbit-bridge-hack-december-2023","name":"Halborn","type":"research","credibility":3},{"url":"https://medium.com/orbit-chain/official-statement-regarding-orbit-bridge-exploit-551928f3dc52","name":"Orbit Chain (Medium): Official statement regarding Orbit Bridge exploit","type":"official","credibility":3},{"url":"https://cryptopotato.com/new-year-new-attack-orbit-bridge-drained-for-82m/","name":"CryptoPotato","type":"news_article","credibility":3}],"severity":"high"},{"content":"Ozys alleges that its former chief information security officer made unauthorized changes to the company's internal firewall policies on November 22, 2023, two days after submitting a voluntary resignation request, and left the company on December 6, 2023, without disclosing the changes or providing proper handover documentation. Ozys stated it discovered the modifications during the post-incident investigation, on January 10, 2024 according to one account, and alleges the weakened firewall created the access conditions exploited in the attack. On January 25, 2024, Ozys made the allegations public, filed a civil lawsuit for damages, and submitted a petition to South Korean police requesting a criminal investigation into the former employee's possible involvement. Ozys did not name the former CISO and said it was separately examining whether the individual may have been connected to or acting in coordination with the alleged Lazarus Group attackers. These allegations remain unproven in court as of the available record.","heading":"Alleged insider threat: former CISO","sources":[{"url":"https://www.theblock.co/post/274411/orbit-bridge-firewall-sabotage-exploit","name":"The Block","type":"news_article","credibility":3},{"url":"https://dailycoin.com/ozys-blames-former-ciso-for-81-5m-orbit-bridge-exploit/","name":"DailyCoin","type":"news_article","credibility":3},{"url":"https://crypto.news/ex-orbit-bridge-employee-accused-of-facilitating-80m-attack/","name":"crypto.news","type":"news_article","credibility":3},{"url":"https://bsc.news/post/orbit-bridge-accuses-former-team-member-for-82m-hack","name":"BSC News","type":"news_article","credibility":3},{"url":"https://www.cryptotimes.io/2024/01/25/ozys-alleges-former-cisos-role-in-firewall-breach/","name":"The Crypto Times","type":"news_article","credibility":3},{"url":"https://medium.com/orbit-chain/official-statement-regarding-orbit-bridge-exploit-551928f3dc52","name":"Orbit Chain (Medium): Official statement regarding Orbit Bridge exploit","type":"official","credibility":3}],"severity":"high"},{"content":"Multiple blockchain security researchers have alleged a connection between the exploit and North Korea's Lazarus Group, but no formal attribution has been confirmed by South Korean or international authorities such as the FBI or U.S. Treasury as of the available record, which distinguishes the case from confirmed Lazarus incidents such as the Harmony Horizon Bridge hack. Blockchain analytics firm Match Systems published a report on January 3, 2024, asserting that the attacker's use of SWFT, Avalanche Bridge and the Sinbad mixer, and funding from sources that had withdrawn from Tornado Cash, matched patterns previously associated with Lazarus; the firm also alleged the same group may have been responsible for the 2023 Atomic Wallet, CoinsPaid and CoinEx hacks. The FBI had previously attributed the Atomic Wallet and CoinsPaid hacks to Lazarus. MetaMask security researcher Taylor Monahan separately stated the attack resembled known North Korean campaigns, including the methodical compromise of multiple private keys and Tornado Cash pre-funding. The pattern-based attribution has been described as medium-to-high confidence within the investigative community but remains officially unverified. Ozys notified South Korea's National Intelligence Service (NIS), which investigated alongside the Korean National Police Agency's Cyber Terror Investigation Unit and the Korea Internet and Security Agency (KISA). The NIS stated: 'We are currently investigating the cause and the perpetrator of the incident. While no direct link to North Korea has been confirmed so far, we are collaborating with relevant agencies and considering the possibility.'","heading":"Alleged Lazarus Group attribution and official investigation","sources":[{"url":"https://cryptonews.com/news/south-korean-agencies-investigate-82m-orbit-bridge-hack/","name":"Cryptonews","type":"news_article","credibility":3},{"url":"https://icoholder.com/en/news/lazarus-group-suspected-in-orbit-chain-hack-blockchain-analysts-uncover-common-tactics-in-high-profile-attacks","name":"ICOholder","type":"news_article","credibility":3},{"url":"https://cryptonews.com/news/orbit-bridge-hacker-suspected-in-coinspaid-and-coinex-breaches/","name":"Cryptonews","type":"news_article","credibility":3},{"url":"https://therecord.media/korean-police-investigating-cryptocurrency-theft-orbit-chain","name":"The Record","type":"news_article","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-orbit-bridge-hack-december-2023","name":"Halborn","type":"research","credibility":3},{"url":"https://cointelegraph.com/news/cross-chain-protocol-orbit-bridge-suffers-exploit-hack","name":"Cointelegraph","type":"news_article","credibility":3}],"severity":"high"},{"content":"On-chain analysis identified the primary attacker address as 0x9263e7873613ddc598a701709875634819176aff, which received initial funding via Tornado Cash through an intermediary address, 0x70462bfb204bf3ccb0560f259072f8e3a85b3512. The attacker's wallets then stayed largely dormant for approximately five months. On June 8, 2024, the attacker moved 12,932 ETH across seven transactions and routed it through Tornado Cash; its value is reported as approximately $48 million or approximately $47.7 million. Subsequent on-chain data put the hacker's remaining balance at approximately $71.2 million in ETH, wrapped Bitcoin and stablecoins, as not all assets (notably $20 million in DAI) were moved in that batch. In early 2025, the attacker transferred a further 4,320 ETH (approximately $18.81 million at the time) through Tornado Cash, bringing the total laundered to 17,242 ETH (approximately $66.35 million). As of mid-2025 the attacker's address was reported to still hold approximately 9,511 ETH and 20 million DAI. No stolen funds had been publicly confirmed as recovered as of the available record.","heading":"On-chain evidence and laundering of stolen funds","sources":[{"url":"https://rekt.news/orbit-bridge-rekt","name":"Rekt News","type":"research","credibility":3},{"url":"https://www.theblock.co/post/299192/orbit-chain-exploiter-moves-48-million-through-tornado-cash-after-months-of-post-hack-dormancy","name":"The Block","type":"news_article","credibility":3},{"url":"https://cointelegraph.com/news/orbit-chain-hacker-moves-nearly-48-million-via-tornado-cash","name":"Cointelegraph","type":"news_article","credibility":3},{"url":"https://www.cryptotimes.io/2024/06/10/orbit-chain-hacker-moves-47-7-million-to-tornado-cash/","name":"The Crypto Times","type":"news_article","credibility":3},{"url":"https://dailycoin.com/orbit-chain-hacker-online-48m-tornado-cash/","name":"DailyCoin","type":"news_article","credibility":3},{"url":"https://blockchain.news/flashnews/eth-alert-orbit-chain-hack-wallet-launders-4-320-eth-via-tornado-cash","name":"Blockchain.News","type":"news_article","credibility":3},{"url":"https://blockchain.news/flashnews/eth-alert-orbit-chain-hack-wallet-launders-4-320-eth-via-tornado-cash-total-17-242-eth-moved-after-81-5m-exploit","name":"Blockchain.News","type":"news_article","credibility":3}],"severity":"high"},{"content":"Ozys says it notified Seoul Metropolitan Police at 10:00 a.m. KST on January 1, 2024, and KISA at 10:35 a.m.; another account says the NIS was notified by approximately 10:35 a.m. that day. Reports name different security firms engaged in the response: ChainLight to lead forensic analysis, and Theori for a joint investigation. In January 2024, Orbit Chain offered an $8 million public bounty for information leading to identification of the attacker or recovery of the stolen assets. Negotiations with the attacker were reportedly attempted and failed. Ozys published a draft Asset Recovery and Ecosystem Normalization Plan dividing an $82 million recovery target into approximately $40 million of immediate recovery assets (from Ozys' own capital, partner grants and business unit sales), approximately $21 million of priority recovery assets (from profits of existing and new services) and approximately $21 million of long-term support assets (from voluntary partner lock-ups and contributions), with a goal of full restoration of the Orbit ecosystem within two years. Ozys also announced a governance proposal to renew the ORC token, including migrating token governance to the Ethereum ecosystem and opening a new staking and governance system in January 2025. Orbit Chain stated it resumed partial bridging services while investigations continued. The ORC token declined approximately 20% immediately after the exploit. As of reporting through mid-2025, no material recovery of the stolen funds has been reported, the attacker has not been arrested or publicly identified, and no compensation mechanism had been confirmed as delivered to affected users.","heading":"Company response, bounty and recovery efforts","sources":[{"url":"https://medium.com/orbit-chain/official-statement-regarding-orbit-bridge-exploit-551928f3dc52","name":"Orbit Chain (Medium): Official statement regarding Orbit Bridge exploit","type":"official","credibility":3},{"url":"https://socket.dev/blog/orbit-chain-offers-8M-bounty","name":"Socket","type":"news_article","credibility":3},{"url":"https://www.coindesk.com/business/2024/01/02/orbit-chain-loses-81m-in-cross-chain-bridge-exploit","name":"CoinDesk","type":"news_article","credibility":3},{"url":"https://medium.com/orbit-chain/orbit-bridge-exploit-asset-recovery-and-ecosystem-normalization-plan-draft-3aa7ac2a6e4a","name":"Orbit Chain (Medium): Asset Recovery and Ecosystem Normalization Plan draft","type":"official","credibility":3},{"url":"https://medium.com/orbit-chain/governance-proposal-for-the-renewal-of-orbit-chain-orc-tokens-a278eb3af1ce","name":"Orbit Chain (Medium): ORC token renewal governance proposal","type":"official","credibility":3},{"url":"https://livedarknet.com/p/negotiations-fail-after-82m-orbit-bridge-hack/","name":"LiveDarknet","type":"news_article","credibility":3},{"url":"https://blockchain.news/flashnews/eth-alert-orbit-chain-hack-wallet-launders-4-320-eth-via-tornado-cash","name":"Blockchain.News","type":"news_article","credibility":3},{"url":"https://rekt.news/orbit-bridge-rekt","name":"Rekt News","type":"research","credibility":3}],"severity":"high"},{"content":"Orbit Bridge lost a large share of its TVL in a single exploit that compromised the multisig governance underpinning the protocol's security, and the stolen funds have not been recovered. The alleged involvement of a state-sponsored threat actor (Lazarus Group) and alleged internal security sabotage by a former senior security officer add to the severity, although both remain unproven. The attacker funded the exploit wallet through Tornado Cash and laundered most of the proceeds through the same mixer, indicating deliberate obfuscation, and still controls tens of millions of dollars in unretrieved funds. Users who held assets in the Ethereum vault at the time of the exploit suffered direct losses. The project has published a recovery plan, offered a bounty, cooperated with Korean authorities and resumed partial service.","heading":"Risk assessment","sources":[{"url":"https://www.halborn.com/blog/post/explained-the-orbit-bridge-hack-december-2023","name":"Halborn","type":"research","credibility":3},{"url":"https://www.infosecurity-magazine.com/news/crypto-stolen-cyber-attack-orbit/","name":"Infosecurity Magazine","type":"news_article","credibility":3},{"url":"https://cointelegraph.com/news/orbit-bridge-hack-pushes-december-crypto-losses-100m","name":"Cointelegraph","type":"news_article","credibility":3}],"severity":"high"}],"timeline":[{"date":"2018","event":"Orbit Chain launched by Ozys as a cross-chain bridging protocol supporting multiple public blockchains.","source":""},{"date":"2023-11","event":"Ozys' chief information security officer submits a voluntary resignation request (November 20, per Ozys).","source":"The Block","source_url":"https://www.theblock.co/post/274411/orbit-bridge-firewall-sabotage-exploit"},{"date":"2023-11","event":"Alleged: the outgoing CISO makes unauthorized changes to Ozys' internal firewall policies (November 22, per Ozys; unproven in court).","source":"The Block","source_url":"https://www.theblock.co/post/274411/orbit-bridge-firewall-sabotage-exploit"},{"date":"2023-12","event":"The former CISO formally departs Ozys without disclosing the firewall changes or providing handover documentation (December 6, per Ozys).","source":"The Block","source_url":"https://www.theblock.co/post/274411/orbit-bridge-firewall-sabotage-exploit"},{"date":"2023-12","event":"Exploit of the Orbit Bridge Ethereum vault on December 31: the attacker, having pre-funded an intermediary wallet with 10 ETH from Tornado Cash, drains 9,500 ETH, 231 WBTC, 30M USDT, 10M USDC and 10M DAI (approximately $81.5M). Reports differ: five withdrawals from about 21:08 to 21:25 UTC, or six transactions from about 20:52 UTC (05:52 to 06:25 KST, January 1).","source":"Rekt News","source_url":"https://rekt.news/orbit-bridge-rekt"},{"date":"2023-12","event":"Development team notified at 07:05 KST; Ethereum vault and bridge contract shut down at 07:21 KST (approximately 22:21 UTC, December 31).","source":"Orbit Chain (Medium): Official statement regarding Orbit Bridge exploit","source_url":"https://medium.com/orbit-chain/official-statement-regarding-orbit-bridge-exploit-551928f3dc52"},{"date":"2024","event":"Orbit Chain publicly confirms the exploit (January 1). Seoul Metropolitan Police notified at 10:00 KST and KISA at 10:35 KST per Ozys; another account says the NIS was notified by 10:35 KST. Security firm Theori engaged.","source":"The Record","source_url":"https://therecord.media/korean-police-investigating-cryptocurrency-theft-orbit-chain"},{"date":"2024-01","event":"ChainLight engaged for forensic analysis; Orbit Chain attempts on-chain communication with the attacker and asks exchanges to freeze stolen assets.","source":""},{"date":"2024-01","event":"Match Systems publishes a report alleging the attacker's tools and patterns are consistent with Lazarus Group and linking the attacker to the Atomic Wallet, CoinsPaid and CoinEx hacks.","source":"ICOholder","source_url":"https://icoholder.com/en/news/lazarus-group-suspected-in-orbit-chain-hack-blockchain-analysts-uncover-common-tactics-in-high-profile-attacks"},{"date":"2024-01","event":"Investigators discover the former CISO's November 22 firewall changes; Ozys notifies the NIS, which opens a formal investigation together with the National Police Agency and KISA. NIS says no direct North Korea link is confirmed but the possibility is being examined. Negotiations with the attacker reported to have failed.","source":"Cryptonews","source_url":"https://cryptonews.com/news/south-korean-agencies-investigate-82m-orbit-bridge-hack/"},{"date":"2024-01","event":"Orbit Chain announces an $8 million public bounty for information leading to attacker identification or fund recovery.","source":"Socket","source_url":"https://socket.dev/blog/orbit-chain-offers-8M-bounty"},{"date":"2024-01","event":"Ozys publicly alleges its former CISO weakened the company firewall before the hack and files a civil lawsuit and police petition against the unnamed former employee.","source":"DailyCoin","source_url":"https://dailycoin.com/ozys-blames-former-ciso-for-81-5m-orbit-bridge-exploit/"},{"date":"2024-02","event":"Ozys publishes a draft Asset Recovery and Ecosystem Normalization Plan targeting $82M in recovery over two years.","source":"Orbit Chain (Medium): Asset Recovery and Ecosystem Normalization Plan draft","source_url":"https://medium.com/orbit-chain/orbit-bridge-exploit-asset-recovery-and-ecosystem-normalization-plan-draft-3aa7ac2a6e4a"},{"date":"2024-06","event":"After about five months of dormancy, the attacker moves 12,932 ETH (approximately $47.7M to $48M) through Tornado Cash in seven transactions.","source":"The Block","source_url":"https://www.theblock.co/post/299192/orbit-chain-exploiter-moves-48-million-through-tornado-cash-after-months-of-post-hack-dormancy"},{"date":"2025","event":"Attacker transfers a further 4,320 ETH (approximately $18.81M) through Tornado Cash, bringing the total laundered to 17,242 ETH (approximately $66.35M); about 9,511 ETH and 20M DAI reportedly remain in attacker wallets.","source":"Blockchain.News","source_url":"https://blockchain.news/flashnews/eth-alert-orbit-chain-hack-wallet-launders-4-320-eth-via-tornado-cash"}],"sources_used":[{"url":"https://www.coindesk.com/business/2024/01/02/orbit-chain-loses-81m-in-cross-chain-bridge-exploit","name":"CoinDesk","type":"news_article","archive_url":"http://web.archive.org/web/20260214073042/https://www.coindesk.com/business/2024/01/02/orbit-chain-loses-81m-in-cross-chain-bridge-exploit","credibility":3,"archive_timestamp":"2026-02-14T07:30:42+00:00"},{"url":"https://blockworks.co/news/80-million-lost-orbit-bridge","name":"Blockworks","type":"news_article","archive_url":"http://web.archive.org/web/20260227024748/https://blockworks.co/news/80-million-lost-orbit-bridge","credibility":3,"archive_timestamp":"2026-02-27T02:47:48+00:00"},{"url":"https://www.newsbtc.com/news/company/ton-foundation-bolsters-drive-to-a-cross-chain-future-together-with-ozys-orbit-bridge/","name":"NewsBTC","type":"news_article","archive_url":"https://web.archive.org/web/20260830010055/https://www.newsbtc.com/news/company/ton-foundation-bolsters-drive-to-a-cross-chain-future-together-with-ozys-orbit-bridge/","credibility":3,"archive_timestamp":"2026-08-30T01:00:55+00:00"},{"url":"https://news.bitcoin.com/orbit-bridge-hack-confirmed-over-81-5-million-lost-in-cryptocurrency-assets/","name":"Bitcoin.com News","type":"news_article","archive_url":"http://web.archive.org/web/20260216114755/https://news.bitcoin.com/orbit-bridge-hack-confirmed-over-81-5-million-lost-in-cryptocurrency-assets/","credibility":3,"archive_timestamp":"2026-02-16T11:47:55+00:00"},{"url":"https://rekt.news/orbit-bridge-rekt","name":"Rekt News","type":"research","archive_url":"http://web.archive.org/web/20260513153300/https://rekt.news/orbit-bridge-rekt","credibility":3,"archive_timestamp":"2026-05-13T15:33:00+00:00"},{"url":"https://www.bankinfosecurity.com/cryptohack-roundup-orbit-chains-81m-new-years-eve-hack-a-24028","name":"BankInfoSecurity","type":"news_article","archive_url":"https://web.archive.org/web/20260830044450/https://www.bankinfosecurity.com/cryptohack-roundup-orbit-chains-81m-new-years-eve-hack-a-24028","credibility":3,"archive_timestamp":"2026-08-30T04:44:50+00:00"},{"url":"https://therecord.media/korean-police-investigating-cryptocurrency-theft-orbit-chain","name":"The Record","type":"news_article","archive_url":"http://web.archive.org/web/20260518221547/https://therecord.media/korean-police-investigating-cryptocurrency-theft-orbit-chain","credibility":3,"archive_timestamp":"2026-05-18T22:15:47+00:00"},{"url":"https://www.theblock.co/post/299192/orbit-chain-exploiter-moves-48-million-through-tornado-cash-after-months-of-post-hack-dormancy","name":"The Block","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://blockchain.news/flashnews/eth-alert-orbit-chain-hack-wallet-launders-4-320-eth-via-tornado-cash","name":"Blockchain.News","type":"news_article","archive_url":"https://web.archive.org/web/20260829182057/https://blockchain.news/flashnews/eth-alert-orbit-chain-hack-wallet-launders-4-320-eth-via-tornado-cash","credibility":3,"archive_timestamp":"2026-08-29T18:20:57+00:00"},{"url":"https://dailycoin.com/orbit-chain-hacker-online-48m-tornado-cash/","name":"DailyCoin","type":"news_article","archive_url":"http://web.archive.org/web/20260829132538/https://dailycoin.com/orbit-chain-hacker-online-48m-tornado-cash/","credibility":3,"archive_timestamp":"2026-08-29T13:25:38+00:00"},{"url":"https://cryptonews.com/news/south-korean-agencies-investigate-82m-orbit-bridge-hack/","name":"Cryptonews","type":"news_article","archive_url":"http://web.archive.org/web/20261005185405/https://cryptonews.com/news/south-korean-agencies-investigate-82m-orbit-bridge-hack/","credibility":3,"archive_timestamp":"2026-10-05T18:54:05+00:00"},{"url":"https://icoholder.com/en/news/lazarus-group-suspected-in-orbit-chain-hack-blockchain-analysts-uncover-common-tactics-in-high-profile-attacks","name":"ICOholder","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cryptonews.com/news/orbit-bridge-hacker-suspected-in-coinspaid-and-coinex-breaches/","name":"Cryptonews","type":"news_article","archive_url":"http://web.archive.org/web/20261005185507/https://cryptonews.com/news/orbit-bridge-hacker-suspected-in-coinspaid-and-coinex-breaches/","credibility":3,"archive_timestamp":"2026-10-05T18:55:07+00:00"},{"url":"https://www.theblock.co/post/274411/orbit-bridge-firewall-sabotage-exploit","name":"The Block","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://dailycoin.com/ozys-blames-former-ciso-for-81-5m-orbit-bridge-exploit/","name":"DailyCoin","type":"news_article","archive_url":"http://web.archive.org/web/20260124003103/https://dailycoin.com/ozys-blames-former-ciso-for-81-5m-orbit-bridge-exploit/","credibility":3,"archive_timestamp":"2026-01-24T00:31:03+00:00"},{"url":"https://crypto.news/ex-orbit-bridge-employee-accused-of-facilitating-80m-attack/","name":"crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20251014204743/https://crypto.news/ex-orbit-bridge-employee-accused-of-facilitating-80m-attack/","credibility":3,"archive_timestamp":"2025-10-14T20:47:43+00:00"},{"url":"https://bsc.news/post/orbit-bridge-accuses-former-team-member-for-82m-hack","name":"BSC News","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/orbit-chain/orbit-bridge-exploit-asset-recovery-and-ecosystem-normalization-plan-draft-3aa7ac2a6e4a","name":"Orbit Chain (Medium): Asset Recovery and Ecosystem Normalization Plan draft","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/orbit-chain/governance-proposal-for-the-renewal-of-orbit-chain-orc-tokens-a278eb3af1ce","name":"Orbit Chain (Medium): ORC token renewal governance proposal","type":"official","archive_url":"http://web.archive.org/web/20260713041950/https://medium.com/orbit-chain/governance-proposal-for-the-renewal-of-orbit-chain-orc-tokens-a278eb3af1ce","credibility":3,"archive_timestamp":"2026-07-13T04:19:50+00:00"},{"url":"https://livedarknet.com/p/negotiations-fail-after-82m-orbit-bridge-hack/","name":"LiveDarknet","type":"news_article","archive_url":"https://web.archive.org/web/20260830201923/https://livedarknet.com/p/negotiations-fail-after-82m-orbit-bridge-hack/","credibility":3,"archive_timestamp":"2026-08-30T20:19:23+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-orbit-bridge-hack-december-2023","name":"Halborn","type":"research","archive_url":"http://web.archive.org/web/20260414123954/https://www.halborn.com/blog/post/explained-the-orbit-bridge-hack-december-2023","credibility":3,"archive_timestamp":"2026-04-14T12:39:54+00:00"},{"url":"https://www.infosecurity-magazine.com/news/crypto-stolen-cyber-attack-orbit/","name":"Infosecurity Magazine","type":"news_article","archive_url":"http://web.archive.org/web/20251110142709/https://www.infosecurity-magazine.com/news/crypto-stolen-cyber-attack-orbit/","credibility":3,"archive_timestamp":"2025-11-10T14:27:09+00:00"},{"url":"https://cointelegraph.com/news/orbit-bridge-hack-pushes-december-crypto-losses-100m","name":"Cointelegraph","type":"news_article","archive_url":"https://web.archive.org/web/20260829182714/https://cointelegraph.com/news/orbit-bridge-hack-pushes-december-crypto-losses-100m","credibility":3,"archive_timestamp":"2026-08-29T18:27:14+00:00"},{"url":"https://cointelegraph.com/news/cross-chain-protocol-orbit-bridge-suffers-exploit-hack","name":"Cointelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20260322055927/https://cointelegraph.com/news/cross-chain-protocol-orbit-bridge-suffers-exploit-hack","credibility":3,"archive_timestamp":"2026-03-22T05:59:27+00:00"},{"url":"https://medium.com/orbit-chain/official-statement-regarding-orbit-bridge-exploit-551928f3dc52","name":"Orbit Chain (Medium): Official statement regarding Orbit Bridge exploit","type":"official","archive_url":"http://web.archive.org/web/20260715114539/https://medium.com/orbit-chain/official-statement-regarding-orbit-bridge-exploit-551928f3dc52","credibility":3,"archive_timestamp":"2026-07-15T11:45:39+00:00"},{"url":"https://cryptobriefing.com/orbit-chain-exploited-816-million-drained-cross-chain-bridge/","name":"Crypto Briefing","type":"news_article","archive_url":"http://web.archive.org/web/20260218160021/https://cryptobriefing.com/orbit-chain-exploited-816-million-drained-cross-chain-bridge/","credibility":3,"archive_timestamp":"2026-02-18T16:00:21+00:00"},{"url":"https://cryptopotato.com/new-year-new-attack-orbit-bridge-drained-for-82m/","name":"CryptoPotato","type":"news_article","archive_url":"http://web.archive.org/web/20260609173504/https://cryptopotato.com/new-year-new-attack-orbit-bridge-drained-for-82m/","credibility":3,"archive_timestamp":"2026-06-09T17:35:04+00:00"},{"url":"https://www.cryptotimes.io/2024/01/25/ozys-alleges-former-cisos-role-in-firewall-breach/","name":"The Crypto Times","type":"news_article","archive_url":"https://web.archive.org/web/20260901101427/https://www.cryptotimes.io/2024/01/25/ozys-alleges-former-cisos-role-in-firewall-breach/","credibility":3,"archive_timestamp":"2026-09-01T10:14:27+00:00"},{"url":"https://cointelegraph.com/news/orbit-chain-hacker-moves-nearly-48-million-via-tornado-cash","name":"Cointelegraph","type":"news_article","archive_url":"https://web.archive.org/web/20260830210315/https://cointelegraph.com/news/orbit-chain-hacker-moves-nearly-48-million-via-tornado-cash","credibility":3,"archive_timestamp":"2026-08-30T21:03:15+00:00"},{"url":"https://www.cryptotimes.io/2024/06/10/orbit-chain-hacker-moves-47-7-million-to-tornado-cash/","name":"The Crypto Times","type":"news_article","archive_url":"https://web.archive.org/web/20260901044119/https://www.cryptotimes.io/2024/06/10/orbit-chain-hacker-moves-47-7-million-to-tornado-cash/","credibility":3,"archive_timestamp":"2026-09-01T04:41:19+00:00"},{"url":"https://blockchain.news/flashnews/eth-alert-orbit-chain-hack-wallet-launders-4-320-eth-via-tornado-cash-total-17-242-eth-moved-after-81-5m-exploit","name":"Blockchain.News","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://socket.dev/blog/orbit-chain-offers-8M-bounty","name":"Socket","type":"news_article","archive_url":"http://web.archive.org/web/20260901101033/https://socket.dev/blog/orbit-chain-offers-8M-bounty","credibility":3,"archive_timestamp":"2026-09-01T10:10:33+00:00"},{"url":"https://www.cypherhunter.com/en/p/ozys/","name":"CypherHunter: Ozys profile","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/orbit-chain/hashed-ozys-ad5aeade42ed","name":"Orbit Chain (Medium): Hashed / Ozys","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/orbit-chain/alameda-research-strategically-partners-with-orbit-chain-b88d1021c9f5","name":"Orbit Chain (Medium): Alameda Research partnership","type":"official","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://orbitchain.io/","name":"Orbit Chain official site","type":"official","archive_url":"http://web.archive.org/web/20251225214305/https://orbitchain.io/","credibility":3,"archive_timestamp":"2025-12-25T21:43:05+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":true,"reviewed_by":null,"model_used":"claude-code-merge-writer","created_at":"2026-05-04T02:54:36.174442+00:00","updated_at":"2026-11-01T22:15:13.399+00:00"},"source_quality":{"total":36,"tier1":0,"tier2":7,"tier3":0,"unrated":29},"follower_count":null,"content_updated_at":"2026-11-01T22:15:14.428Z","last_fact_checked_at":"2026-11-01T22:15:13.641Z","fact_check_next_allowed_at":"2026-11-08T22:15:13.641Z","update_next_allowed_at":null}