0x2a566d111d0a5be888fec5f3834434af3245bb1b

DeFi Exploit: Moby Trade - Rekt

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-27
• Last updated: 2026-04-27

DeFi Exploit: Moby Trade - Rekt Date: 1/8/2025 Loss: $1,003,080 USD Tags: Moby Trade, Rekt, Private Key Leak Summary: When your private keys become the white whale, who's really hunting whom? Moby Trade loses roughly $1 million to a compromised key, while white hats rescue $1.47M from the depths. Some lessons of the sea only need to be learned once. Exploit/attacker addresses extracted from on-chain analysis and incident reports. Reference: https://rekt.news/mobytrade-rekt Source: https://de.fi/rekt-database

Other addresses in this report: 0x6a92d4840309f447922114a349984a1d09a51470

@peckshield: It looks like this hacker was making withdrawals from Binance exchange.

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-25
• Last updated: 2026-04-25

Crypto crime address reported by @peckshield (PeckShield official — blockchain security and hack tracking). Message: It looks like this hacker was making withdrawals from Binance exchange. The address https://arbiscan.io/address/0x2a566d111d0a5be888fec5f3834434af3245bb1b, which is associated with the hacker, laid the foundation for the address https://arbiscan.io/address/0xd9346e58330d10542a491dc72eb797c5468ddbf4, funding the initial Gas. Then, after 29 minutes, additional funding was received for the address h... Source: https://t.me/peckshield/45463

@peckshield: By the way, as I mentioned in my message https://t.me/peckshield/45451 (January 9) and as stated in the official report

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-25
• Last updated: 2026-04-25

Crypto crime address reported by @peckshield (PeckShield official — blockchain security and hack tracking). Message: By the way, as I mentioned in my message https://t.me/peckshield/45451 (January 9) and as stated in the official report of Moby-Trade 👆 (January 10), the attacker's address 0x2a566D111d0a5Be888FEC5F3834434Af3245Bb1b, initially tested the contract in the Sepolia test network. At that time, I did not know in which faucet the attacker made a request for test tokens. But now I can assume that the atta... Source: https://t.me/peckshield/45586