Private Key Compromise
4 incidents, 0 live. 28 days since the last new one.
4 drains in the last 12 months
4 drains in the last 12 months
3 drains in 2026
1 drains in 2025
Past
September 2026 1
-
Critical✓Contained
Crypto casino Duelbits loses about $7M from hot wallets in suspected private-key compromise
On 24 September 2026 crypto casino Duelbits had hot wallets drained across Ethereum, BNB Chain, Tron, Bitcoin and Solana. Co-founder Joe called it a hack of about $7M; other estimates run from about $4.2M (Scam Sniffer, early) to about $6M (CertiK), and Rekt traced about $6.07M. Scam Sniffer and SlowMist point to a leaked private key, but Duelbits has not published a root cause. The site reopened on 27 September and said user funds were safe.
Duelbits crypto casino hot wallets·Ethereum, BNB Chain, Tron, Bitcoin, Solana·$7.0M stolen·Since Sep 24, 2026·
May 2026 1
-
Critical◐Partly contained
StablR's EURR and USDR depeg after attacker takes over 1-of-3 minting multisig with a stolen key
On 23-24 May 2026 an attacker used the compromised private key of one signer on StablR's 1-of-3 minting multisig to add themselves as owner, replace the other owners and mint 8.35M USDR and 4.5M EURR, about $13.5M face value. They dumped about $10.4M of it on DEXs for ETH, with early net proceeds estimated at $2.8M, pushing USDR as low as $0.40 and EURR to about $0.85. ZachXBT said he helped freeze a six-figure sum.
StablR EURR and USDR stablecoins and holders·Ethereum·$2.8M stolen·Since May 23, 2026·
March 2026 1
-
Critical✓Contained
Resolv's USR stablecoin depegs after attacker uses a compromised signing key to mint 80M unbacked tokens
On 21 March 2026 an attacker obtained a privileged private key used by Resolv's off-chain minting service, deposited about $100K-$200K in USDC and minted about 80M USR, which the contracts did not cap. They swapped out for about 11,408 ETH, roughly $24.5M, and USR fell to about 26 cents. Resolv paused its app, offered the attacker a 10% bounty and asked holders not to trade USR while it works on recovery.
Resolv Labs USR stablecoin and holders·Ethereum·$25M stolen·Since Mar 21, 2026·
November 2025 1
-
Critical✕Still active
Whale's 1-of-1 Safe multisig drained of $27M+ after key compromise, ETH laundered via Tornado Cash
A private whale's Gnosis Safe on Ethereum, set up so a single signature could approve transactions, was taken over and drained of about $27.3M according to PeckShield; Hacken's forensics say losses may exceed $40M. Ownership passed to the attacker six minutes after the Safe was created on 4 November 2025, and the thief laundered ETH through Tornado Cash in batches while slowly unwinding a leveraged Aave position. A multisig with one signer is only as safe as that one key.
Private whale's Gnosis Safe multisig (Ethereum)·Ethereum·$27M stolen·Since Nov 4, 2025·
No drains match these filters.