A crypto wallet just lost $25.6M in a sophisticated drain attack — and this isn't their first rodeo.
The attacker swept multiple assets including $WBTC, cbBTC, $LDO, USDS, and $CRV, converting everything into DAI and $ETH. What makes this particularly striking: the exact same wallet was hit for $24.23M back in September 2023 through malicious token approvals. That time, the attacker returned roughly 90% of the funds.
Two massive drains on the same address within 15 months raises serious questions about wallet security practices and whether this victim learned anything from the first incident. Lightning doesn't usually strike twice — unless you're standing in the same spot holding the same metal rod.
Theft address flagged: 0x8fEB0c6eF08B20bA19C04F951d4408bB5A1F95Ae
Revoke your token approvals regularly. Check your wallet permissions. Don't wait to become a case study.
The attacker swept multiple assets including $WBTC, cbBTC, $LDO, USDS, and $CRV, converting everything into DAI and $ETH. What makes this particularly striking: the exact same wallet was hit for $24.23M back in September 2023 through malicious token approvals. That time, the attacker returned roughly 90% of the funds.
Two massive drains on the same address within 15 months raises serious questions about wallet security practices and whether this victim learned anything from the first incident. Lightning doesn't usually strike twice — unless you're standing in the same spot holding the same metal rod.
Theft address flagged: 0x8fEB0c6eF08B20bA19C04F951d4408bB5A1F95Ae
Revoke your token approvals regularly. Check your wallet permissions. Don't wait to become a case study.