On November 14, 2026, attackers took control of approximately 64,000 Bitcoin mining machines and redirected roughly 13 EH/s of hashing power to the OCEAN mining pool. OCEAN’s reported hashrate briefly rose to 50 EH/s before settling at around 40 EH/s and later falling to about 100 PH/s, indicating that most machines were reconfigured or disconnected quickly. No blocks were mined and the attacker-controlled payout address received no payments, while the revenue lost by operators cannot be recovered. CoreX Hosting detected the incident after identifying unauthorized changes to mining settings; Luxor Commander, a tool used to manage mining fleets, is suspected to have been the entry point, but this has not been confirmed.
Source: Read the original article
