More than 500 long-dormant Ethereum wallets were drained, resulting in losses of nearly $800K. Around 260 ETH was moved to a tagged phishing address before being bridged through THORChain. The incident raises concerns about old key exposure and self-custody risks globally across the sector today's market.
Investigators report that more than 500 dormant Ethereum wallets drained in a coordinated sweep. Losses total around $800K. Over 260 ETH moved into an Etherscan-labeled address called Fake_Phishing2831105.
It later recorded a 324.741 ETH transfer to THORChain Router v4.1.1. The wallets stayed inactive for four to eight years, suggesting old keys or seed phrases may be involved.
Source: Wu Blockchain
Security researchers say the compromise path remains unclear across wallets. Possible causes include legacy wallet tools, exposed private keys, or leaked seed storage from older systems. The phishing-labeled address has received hundreds of transactions over time, suggesting repeated consolidation activity. Investigators continue mapping potential links to older wallet generation tools and compromised storage environments.
The affected wallets had been inactive for four to eight years. Analysts link the pattern to early self-custody habits and weak key storage methods. The same address cluster is part of the incident.
Broader Dormant Ethereum wallet security concerns rose in April, with 28 incidents and over $635 million in losses reported by DefiLlama data. Other April events included Wasabi Protocol admin exploits, Drift signer issues, and KelpDAO bridge verification failures affecting systems.
These incidents show how multiple control failures across DeFi can overlap with wallet-level risks. Analysts note that older infrastructure decisions still affect current security exposure.
Source: CryptoSlate X
Market reaction around Ethereum remained cautious after the report. No major price spike or crash was directly linked to the drain event. Traders focused on long-term self-custody risks rather than short-term price moves. Attention stayed on key safety practices and dormant wallet exposure. Community discussion emphasized caution around storing long-term funds. Traders also watched bridging activity closely due to past cross-chain incidents. Overall sentiment remained watchful rather than reactive.
The movement of drained Ethereum through THORChain adds another layer of concern for investigators. Cross-chain bridges often make tracing funds more complex due to asset swapping across networks. Security analysts say such routing patterns are sometimes used to obscure fund origins. However, no confirmed link has been established between THORChain itself and the wallet compromise, and tracing remains ongoing across multiple blockchain explorers today.
Source: CryptoSlate
The incident has also renewed attention on long-term hygiene in the Ethereum ecosystem. Many early users stored seed phrases in unsecured digital formats or legacy browser extensions. Security experts suggest that even inactive wallets remain exposed if backups were ever leaked. This event reinforces the need for periodic wallet audits and migration of old funds into modern hardware-based storage systems for improved protection against silent, delayed attacks.
Security incidents continue to highlight risks tied to old wallets and weak key storage. Experts say long-term holders must review dormant accounts and improve custody methods. The latest crypto hack of 2026 adds to ongoing concerns about infrastructure safety, even without a clear, confirmed compromise path identified globally today.
Disclaimer: This article is for informational purposes only. It does not provide financial advice, investment recommendations, or trading guidance. Cryptocurrency investments involve risk, and readers should research independently before making decisions. All data is based on publicly available reports from CryptoSlate and WuBlockchain. Figures may change as investigations continue. Readers should verify updates from official sources.
Sakshi Jain is a crypto journalist with over 3 years of experience in industry research, financial analysis, and content creation. She specializes in producing insightful blogs, in-depth news coverage, and SEO-optimized content. Passionate about bringing clarity and engagement to the fast-changing world of cryptocurrencies, Sakshi focuses on delivering accurate and timely insights. As a crypto journalist at Coin Gabbar, she researches and analyzes market trends, reports on the latest crypto developments and regulations, and crafts high-quality content on emerging blockchain technologies.
Sakshi Jain is a crypto journalist with over 3 years of experience in industry research, financial analysis, and content creation. She specializes in producing insightful blogs, in-depth news coverage, and SEO-optimized content. Passionate about bringing clarity and engagement to the fast-changing world of cryptocurrencies, Sakshi focuses on delivering accurate and timely insights. As a crypto journalist at Coin Gabbar, she researches and analyzes market trends, reports on the latest crypto developments and regulations, and crafts high-quality content on emerging blockchain technologies.
Owned by:-
DCG Tech FZCO, UAE
Delivery Partner:-
Gabbar MediaTech Pvt Ltd.
Copyright © 2026 Coin Gabbar. All Rights Reserved.
