Holdstation suffered a hacking attack resulting in a loss of 462,000 USDT, has suspended services, and promises full compensation.

According to Mars Finance, based on GoPlus monitoring, the account abstraction solution Holdstation was targeted in a supply chain attack. The attacker stole developer session tokens, bypassed two-factor authentication, and injected malicious code into application updates, resulting in user funds being stolen. The attack caused a total loss of 462,000 USDT. The attacker’s address is 0xcbfA60B39cfAeaE475f649fB6705bD477219bF8d. The Holdstation team has suspended services, pledged to fully compensate affected users, and is working with security teams to investigate the incident. They also posted a message on the blockchain, hoping to encourage the attacker to return the funds through a bug bounty program.