Lendhub, a relatively small cross-chain crypto lending platform operating on HECO, was exploited to the tune of $6 million dollars earlier this January. The attack was carried out due to a poorly-executed removal of a deprecated IBSV cToken. Its replacement, which was already active, had an identical price point at the time, which the unknown bad actor to manipulate the pricing and drain around $6million worth of crypto from the platform. According to a security researcher, a proper analysis of the attack will be difficult to carry out as the smart contracts responsible for the price of the two tokens were both unverified.
Source: Jordan Lyanchev, 2023-02-28; https://cryptopotato.com/lendhub-exploiter-moves-proceeds-to-tornadocash/