Someone redirected roughly 13 EH/s of hashing power from approximately 64,000 Bitcoin mining machines to the OCEAN pool on November 14. The attackers earned nothing, but the affected miners lost revenue they cannot recover. Luxor Commander is the suspected entry point, though that remains unconfirmed.
Someone took control of approximately 64,000 Bitcoin mining machines on November 14, 2026. They pointed roughly 13 EH/s of hashing power at the OCEAN mining pool.
The attackers gained nothing. No blocks were mined, and their payout address received no payments. The miners whose machines were hijacked, however, lost revenue that is gone for good.
How the hijacking unfolded
The incident began at approximately 8 p.m. Central Time, and OCEAN's reported hashrate jumped sharply in public data. The pool's hashrate climbed to approximately 50 EH/s before settling at around 40 EH/s.
Then the surge faded. The diverted power later fell to about 100 PH/s, which means most of the hijacked machines had been pulled back or had dropped off within a short window.
A suspected software weak point
Operators first learned about the problem from CoreX Hosting, which spotted unauthorized changes to pool settings on the affected machines. One operator said their entire mining operation was hit.
Luxor Commander, a software tool used to manage mining fleets, is the suspected entry point. That link remains a suspicion rather than a confirmed finding.
This may not have been a one-off, because reports had already surfaced of unauthorized pool changes in the days before November 14.
Why the lost revenue cannot be recovered
Mining income depends on contributing work in real time, so once that time passes, the opportunity is gone. Bitcoin's protocol did not fail, and nothing about the network's consensus rules was broken. If the suspicions hold, what failed was the operational software between a mining company and its hardware.
Still, the episode shows how quickly a large block of hashrate can move without its owners' consent.
Source: Crypto Briefing
Trading involves risk.
Risk Disclaimer
