0x59ae3c8dd50063429d86bdaebbc350fb64e9884b

BitBay vault zero-liquidity withdraw exploit attacker

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-14
• Last updated: 2026-10-16

BitBay vault exploited on 2026-10-09: _withdraw() paid the whole token balance when liquidity == 0; the attacker forced a zero-liquidity state via reposition() and redeemed one minimal share to drain ~14,838.47 DAI (~$14K) per SlowMist. Chain: EVM (the SlowMist alert does not name the chain; a third-party summary says Polygon). Attacker 0x59Ae3c8dd50063429D86BdaEBbC350fB64e9884B. Victim contract excluded. Source: SlowMist TI Alert https://x.com/SlowMist_Team/status/2108399198035202138 (2026-10-09). Confidence: High (explicit attacker attribution by SlowMist). Source: BlockintAI research