RWAVault exploit (2026-04-28) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
RWAVault exploit on EVM, 2026-04-28. DeFiHackLabs summary: RWAVault - Missing ERC4626 allowance check. Loss as recorded by DeFiHackLabs: 398,655.47 USDC vault outflow. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x7137804200a073f616d92e87007f1f100100b56a — labeled "attacker" (EVM) - 0x50c140c2f705fa9d0bd0f4f253bacf4087588d17 — labeled "attack contract" (EVM) Sources: https://gith…
Other addresses in this report: 0x7137804200a073f616d92e87007f1f100100b56a