Luxor confirms Commander software breach after hashrate redirected from 10+ client accounts

The significance here lies less in the disclosed details than in what Luxor left out: no hashrate volume, no client names, and no stated remediation. For a management layer that sits between miners and their machines, a compromise that redirects hashrate is a custody-adjacent problem, not just an IT one, and it lands on clients who delegated operational control to a third party. Coming on the heels of other mining-infrastructure security failures, the pattern suggests pooled management tooling is an attractive target. Whether Luxor discloses scope and affected clients, and whether comparable providers face renewed scrutiny, is the open question.