Mining hosting provider CoreX says approximately 13 EH/s of Bitcoin hash rate has been hijacked.
TechFlow reports that on November 15, according to The Defiant, Bitcoin host CoreX Hosting stated that approximately 13 EH/s of mining hashrate was redirected without authorization to the OCEAN mining pool and routed to its Bitcoin address identified as belonging to the attacker.
CoreX stated it was gradually restoring miner configurations, subsequently confirming that the attack had ended and the hashrate linked to that address dropped to approximately 100 PH/s. The report noted that while the address has not yet received pool payouts, its submitted valid mining work may still be eligible for subsequent block rewards.
The OCEAN website estimates that work from this address within the reward window would yield approximately 0.66 BTC, excluding transaction fees; this estimate does not represent credited funds, nor does it reflect the total verified losses for miners. The attack vector and the number of affected miners remain unconfirmed.





