Holdstation suffers a supply chain attack, with attackers stealing developer session tokens and injecting malicious code, resulting in a loss of 462,000 USDT funds. The team has suspended services, pledged to compensate affected users, and is working with security teams to investigate.