Whale
4 incidents, 2 live. 71 days since the last new one.
4 drains in the last 12 months
4 drains in the last 12 months
2 drains in 2026
2 drains in 2025
Live
-
Critical✕Still active
Whale drained of $25.6M in aWBTC, DAI, WBTC and ETH; same wallet lost $24M to phishing in 2023
On 12 August 2026 an unidentified whale lost about $25.6M, including about $6.3M in aWBTC, $5.1M in DAI, $4.7M in WBTC and $2.6M in ETH, according to PeckShield. Analyst Specter called it a phishing attack and PeckShield called it a hack; the exact method has not been published. The attacker swapped the funds into DAI and ETH across four addresses. The same wallet lost about $24.2M through malicious token approvals in September 2023.
Unidentified Ethereum whale wallet·Ethereum·$26M stolen·Since Aug 12, 2026·
-
Critical◐Partly contained
Solana owner-permission phishing: OKX Wallet and Phantom add warnings after $3M loss
A Solana wallet user signed a transaction from a disguised tool site that showed no balance change but moved the account's Owner permission to an attacker address starting GKJBEL. SlowMist reported over $3M lost, with about $2M in DeFi positions later recovered with protocol help. On 7 Jan 2026 OKX Wallet warned the technique was spreading across Solana, said it had added pre-signing warnings, and said Phantom had added similar alerts. Before signing, check for any instruction that changes an account owner or authority; normal wallets never ask you to change your own account's owner.
Solana wallet user (single victim)·Solana·$3.0M stolen·Since Dec 5, 2025·
Past
January 2026 1
-
Critical✕Still active
Investor sends 4,556 ETH ($12.25M) to a poisoned lookalike address planted months earlier
On 30 January 2026 a victim sent 4,556 ETH, about $12.25M, to a lookalike of a regular counterparty's address. The attacker had seeded it into the victim's history with fake token transfers from February 2025 and ETH dust from October 2025; it matched the real address's first and last four characters. About 33 minutes later the ETH was swept to a new wallet, and the next day all of it went into Tornado Cash. Scam Sniffer flagged the loss.
Ethereum whale wallet·Ethereum·$12M stolen·Since Jan 30, 2026·
November 2025 1
-
Critical✕Still active
Whale's 1-of-1 Safe multisig drained of $27M+ after key compromise, ETH laundered via Tornado Cash
A private whale's Gnosis Safe on Ethereum, set up so a single signature could approve transactions, was taken over and drained of about $27.3M according to PeckShield; Hacken's forensics say losses may exceed $40M. Ownership passed to the attacker six minutes after the Safe was created on 4 November 2025, and the thief laundered ETH through Tornado Cash in batches while slowly unwinding a leveraged Aave position. A multisig with one signer is only as safe as that one key.
Private whale's Gnosis Safe multisig (Ethereum)·Ethereum·$27M stolen·Since Nov 4, 2025·
No drains match these filters.