Bitcoin hashrate hijacked to OCEAN pool, 13 EH/s redirected to attacker address

The episode points to a less-discussed attack surface: not the protocol, but the operational layer where hosting providers and pool configurations meet. The rapid collapse from 13 EH/s to roughly 100 PH/s suggests a short-lived redirect rather than a sustained capture, and the absence of payments to the address leaves the attacker's actual gain unclear. For miners relying on third-party hosting, the incident raises questions about configuration controls and monitoring. Whether the undisclosed program involved becomes a broader vector, and how hosting providers respond, is the open question.