Suspected private key compromise on Ethereum (2026-10-26): about 682 ETH drained to 0x933e52…204b, about 281 ETH moved on to Tornado Cash
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Individual wallets (suspected private key compromise)
- Incident date: 2026-10-26
- Reported: 2026-10-27
- Last updated: 2026-10-27
On 2026-10-26 about 682 ETH (about $1.58M, per ScamSniffer and CertiK Alert) was drained from Ethereum wallets in what ScamSniffer describes as a suspected private key compromise on Ethereum and Base. ScamSniffer's post (9:30 PM CT on 2026-10-26, 02:30 UTC on 2026-10-27) says 682 ETH was drained in under two hours, lists three victim wallets (0x426e36…4d9a, 0xe7e772…1f3e, 0x3a7bd7…e421) and names 0x933e52ad61177c66db35cde3a74ab975df19204b as the wallet the funds were sent to. CertiK Alert separately reported multiple Tornado Cash deposits that trace to the same address, which it says drained…
Other addresses in this report: 0x933e52ad61177c66db35cde3a74ab975df19204b, 0xa8fc74b7ad6fe4d7f02ef80f743c3be32ce49605, 0x48fec96c51b0c5595c5046e5b39c1e1383048076, 0x6573cc38db36430a3f9be15c79adcb8cd49d8b26, 0x7b1899d8260b6e6506a3257537da89ada9cfd1de, 0x13320fc21b2fd5791c82a9f811b0c24aff39d93d, 0x1db60376c4f9dbb6ea642d8a1a3052401399b249, 0x2fe8d1d5592c58ae79a5e0bbc445323618ab61d7, 0x75b9758bba5671c1e71c533a3fa5557f85126c3e, 0xa3a316a96060e0e12219be2ebcf1bf31d107daf0