EU entity suspected of losing $106M+ from exchange accounts on 1 Nov 2026, ZachXBT says: theft and laundering wallets
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Incident date: 2026-11-01
- Reported: 2026-11-02
- Last updated: 2026-11-02
ZachXBT says an unnamed EU entity is suspected of losing more than $106M from multiple centralized-exchange accounts on 1 November 2026, and that the suspected stolen funds were withdrawn as USDC and USDT by an illicit actor. He listed 11 Ethereum theft addresses in a public Telegram post on 2 November 2026 at 12:28 UTC. ZachXBT says that over the following 24 hours the actor swapped USDC for ETH, sent funds to instant-exchange services (he names WellWallet and Kyrrex), converted to XMR via Wagyu, and bridged across multiple chains. ZachXBT says the actor remains unidentified but, with a high…
Other addresses in this report: 0x5a154f77852ed274fd6f4c324a1ee27809052ff7, 0xa1096a66f9ed58a9594a6a1ad67a5472c0907224, 0xd010cba790a6ab0048da18f2fbe8e3faf463a16a, 0xc80f1cd39dc15a341c4ff083ece7d526964a8ce4, 0x4a05b9f4c9385388eb27588951ddbf2916b5daf3, 0x7f2366116d0e193fbae83a930a70d2473d8520d6, 0xcf2ace496b5888a047f1a59ab52e72eb3e9be66b, 0xe0f0c1aff99879ccd594abd6fe10452cbb010b0c, 0xb4043516a2e5c20e6227ea074c4112457d06d39b, 0x9eca05d78f6751c91ab048858b7d21a67c015547, 0x65c33571ca72885637076b84db517809c16eb841, 0xbe95eb71eee22f7641d970afc1e7bb5cbb1aa85a, 0x448cdc9b813d3bdeabcc07a922ac4e06aaa97337, 0x18ec8239cbd3062289e4bd514250d14bdd426413, 0x05184a1b5c68b5b7ef826023a4e1d7cc67d1b01e, 0xadd95cd98e0288ba69785e3151e1db86adf8dd58, 0x29e9d7715d935e0d0d4b0dd0efc952a97e551020, 0x378b4f150707c283574dc89739608d29036d57d5, 0x795a9d22f233024487161fe6daff73397c162621, 0x730bcb1296758c377149d7409f98f041cf723992