# Attackers Redirect 13 EH/s From About 64,000 Hijacked Bitcoin Miners to Ocean Pool

> Attackers seized about 64,000 Bitcoin miners on November 14, 2026 and pointed 13 EH/s at Ocean, mining no blocks and earning no payout.

- Published: 2026-11-15T15:07:29+00:00
- Section: Incidents
- Author: News Desk
- URL: https://newsforagent.com/news/2026-11-15/ocean-bitcoin-miners-hijacked-hashrate
- Source: [TradingView](https://www.tradingview.com/news/cryptobriefing:9f02f8869094b:0-attackers-hijack-about-64-000-bitcoin-miners-and-point-13-eh-s-at-ocean/)

## Key takeaways

- Attackers took control of approximately 64,000 Bitcoin mining machines on November 14, 2026 and redirected roughly 13 EH/s to the OCEAN pool.
- No blocks were mined and the single attacker-controlled payout address received no payments.
- CoreX Hosting spotted unauthorized changes to pool settings on the affected machines, and Luxor Commander is the suspected entry point.

Attackers took control of approximately 64,000 Bitcoin mining machines on November 14, 2026 and redirected roughly 13 EH/s of hashing power to the OCEAN mining pool. [TradingView](https://www.tradingview.com/news/cryptobriefing:9f02f8869094b:0-attackers-hijack-about-64-000-bitcoin-miners-and-point-13-eh-s-at-ocean/) reported the hijack, which produced no blocks and no payments to the attackers.

## How the Ocean Hashrate Surge Unfolded

The incident began at approximately 8 p.m. Central Time, and OCEAN's reported hashrate jumped sharply in public data. The pool's hashrate climbed to approximately 50 EH/s before settling at around 40 EH/s. The diverted power later fell to about 100 PH/s, a petahash being one-thousandth of an exahash, so most of the hijacked machines had been pulled back or otherwise dropped off within a short window.

All of the redirected output went to a single attacker-controlled payout address, which never received a payment. Operators first learned about the problem from CoreX Hosting, which spotted unauthorized changes to pool settings on the affected machines. One operator said their entire mining operation was hit. The suspected entry point is Luxor Commander, a software tool used to manage mining fleets, though that link remains a suspicion rather than a confirmed finding. Reports of unauthorized pool changes had already surfaced in the days before the November 14 incident.

## Ocean's Security Record and Pool Scale

[OCEAN](https://akta.pro/company-profiles/0002djc/ocean) is a non-custodial Bitcoin mining pool founded in 2023 and headquartered in Cheyenne, according to akta.pro [company records](https://akta.pro/company-data). The same records show the pool completed a SOC 2 Type 1 attestation via independent auditor AARC-360 in November 2025, formalizing enterprise-grade security and operational controls. The records list a current pool hashrate of 26.19 Eh/s and 12,755 total blocks found since inception, alongside a 2023 seed round of $6.2 million.

## Ocean's Leadership Changes Before the Hijack

OCEAN named Bob Burnett as chairman of its board on September 1, 2026, filling the role vacated by co-founder Luke Dashjr's resignation on August 29, 2026, Crypto Briefing reported. Burnett, CEO of Barefoot Mining, directs over 90% of his company's hashrate to the pool. CoinDesk reported that Dashjr resigned as chairman, CTO and director, with parent firm Mummolin repurchasing his entire equity stake in a split the parties described as mutual. OCEAN ended support for the BIP-110 fork chain on September 3, 2026, after mining activity declined, CoinMarketCap reported.

## What Operators Face After the Hijack

The immediate question for mining operators is the entry point. If Luxor Commander is confirmed as the vulnerability, anyone running it will want to know what was exposed and whether a fix is available. Until that is clear, operators may want to audit their pool settings frequently, since CoreX Hosting caught this because someone noticed the settings had changed.

## Companies in this story

- [Ocean company profile](https://akta.pro/company-profiles/0002djc/ocean) · website: https://ocean.xyz

---
News for Agent · https://newsforagent.com/llms.txt