Indonesia's crypto exchange Indodax suffered a loss of about $22 million involving various cryptocurrencies and its application and website were disabled pending an investigation.
On September 11, several blockchain investigative firms including PeckShield, Cyvers and SlowMist reported that there was a hacking attack on Indodax.
The hacker stole a large amount of several cryptocurrencies such as Bitcoin, Tronix, Ethereum, Poligon, Shiba and several other tokens.
Slowmist found that the Indodax transaction system allowed hackers to withdraw funds directly while the firm Cyvers believed that the exchange had been attacked.
The hacker stole over $1.42 million in Bitcoin, $2.4 million in Tron's TRX, over $14.6 million in various ERC-20 tokens, $2.58 million in POL and $900,000 in ETH from the Optimism blockchain.
In addition, Cyvers detected more than 150 suspicious transactions on various tokens and hackers acting focused on Ethereum crypto only.
After changing the stolen target to Ethereum, hackers use mixing services such as Tornado Cash to liquidate funds anonymously.
Indodax made a statement on its social media about the hack and informed users that it would temporarily shut down the service.