D'CENT App Wallet (IoTrust) bulk key-sweep — attacker collector addresses (Blackpaper BP-1275)
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
D'CENT mobile App Wallet (IoTrust) bulk key-sweep incident beginning around 2026-09-15. Blackpaper reports addresses whose keys were used in the vulnerable software wallet were swept in bursts (hardware devices not affected). Source: Blackpaper BP-1275 (https://blackpaper.wiki/incident/BP-1275/), in-house verified. This report lists ONLY addresses Blackpaper places under Attacker addresses (collector / hub / gas-supplier infrastructure); no victim wallets are included: - 0x2c260f65563f7b2e234eb8c4218d9812ff9666bc (Ethereum/Arbitrum · Collector address for swept EVM funds) -…
Other addresses in this report: 0x2c260f65563f7b2e234eb8c4218d9812ff9666bc, 0x423c7adc42e52069859da68b957db9cd8c08c173, 0xcd91e76d3c85c850f00529fffb79a6310bac6baf