Approximately 64,000 Bitcoin mining machines were reportedly hijacked on November 14, with attackers temporarily taking control of roughly 13 EH/s of hashrate and redirecting it to the OCEAN mining pool.

The incident began around 8 PM U.S. Central Time. OCEAN’s reported hashrate rapidly jumped toward 50 EH/s before settling near 40 EH/s, making the unusual activity visible almost immediately.

Attackers also changed the mining payout address to a Bitcoin wallet they controlled, meaning any successfully earned rewards would have been directed to them rather than the legitimate miners.

However, the attack ultimately generated no Bitcoin for those responsible.

OCEAN did not mine a block with the redirected hashrate during the incident, and the attacker-controlled address received no payout. The affected miners were less fortunate because the mining revenue lost during those hours cannot be recovered.

Mining infrastructure provider CoreX Hosting later said the incident appeared to have ended on November 15, with the hijacked hashrate dropping from around 13 EH/s to approximately 100 PH/s.

64,000 Bitcoin Mining Machines Hijacked, Redirecting 13 EH/s to OCEAN Pool Bitcoin News reported that approximately 64,000 Bitcoin mining machines, representing about 13 EH/s of hashrate, were hijacked around 20:00 U.S. Central Time on November 14. The attackers redirected the hashrate to OCEAN and replaced the mining payout address with one they controlled, briefly pushing the pool’s hashrate close to 50 EH/s. CoreX Hosting said the incident appeared to have ended on November 15, with the affected hashrate falling to around 100 PH/s. The attackers failed to mine any blocks and received no block rewards, although affected miners lost mining revenue during the incident. A potential compromise of Luxor Commander software has not been independently confirmed.

The entry point remains unclear.

One affected operator pointed to Luxor’s Commander mining-management software as a possible source of the compromise, but that connection has not been independently confirmed. CoreX has also said the incident was not linked to LuxOS itself.

Read also: Bitcoin and XRP Leverage Is Being Flushed: Is a Bottom Getting Closer?

Importantly, Bitcoin’s blockchain was not compromised. The incident targeted mining infrastructure and pool configurations rather than Bitcoin’s consensus mechanism.

Still, redirecting 13 EH/s without miners’ authorization shows how consequential a breach of fleet-management infrastructure can become when tens of thousands of machines are remotely controlled.

For more crypto news and price predictions, click here.

Subscribe to our YouTube channel for daily crypto updates, market insights, and expert analysis.