Unknown victim drained of $25.6M in second major theft since 2023
An unknown victim was drained of $25.6 million in crypto assets, according to on-chain investigator Specter, who said the attacker moved tokens including WBTC, cbBTC, LDO, USDS and CRV before swapping them into DAI and ETH.
An unknown victim was just drained of $25.6M in assets.
The attacker swapped all the assets, including WBTC, cbBTC, LDO, USDS, and CRV, for DAI and ETH.
Interestingly, the same wallet was drained of $24.23M in September 2023 due to malicious token approvals. The attacker… pic.twitter.com/xhGObE5zsS
— Specter (@SpecterAnalyst) August 12, 2026
The wallet tied to the theft was identified as 0x8fEB0c6eF08B20bA19C04F951d4408bB5A1F95Ae. Specter also said the same address had previously lost $24.23 million in September 2023 through malicious token approvals, with roughly 90% of that amount later returned.
The latest drain adds another large loss to a wallet that has already been compromised once before. The repeated targeting is notable, but the available information does not establish who controlled the address or how the second theft was carried out beyond the asset movements flagged on-chain.
The listed tokens suggest the attacker had access to a broad set of holdings rather than a single asset. According to the investigator’s post, the stolen funds were converted into DAI and ETH after the drain.
A prior breach left most of the 2023 loss recovered
Specter’s account of the earlier incident says the September 2023 theft stemmed from malicious approvals, a mechanism that can expose a wallet once permissions have been granted to a hostile contract or address. In that case, the attacker reportedly returned most of the stolen funds afterward.
Whether the two incidents are directly connected beyond the shared wallet is not clear from the available details. What is visible is that the same address has now suffered a second major outflow, bringing fresh attention to repeated wallet-level compromise in crypto security incidents.
