Internet Token exploit (2026-09-21) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Internet Token exploit on EVM, 2026-09-21. DeFiHackLabs summary: InternetToken - permissionless swapV3 with caller-supplied pool lets a fake callback mint INT arbitrarily. Loss as recorded by DeFiHackLabs: 764,145,702 INT + 5.846988 WETH (attacker minted 925.41M INT total, dumped 161.27M into the real INT/WETH pool for the WETH, reproduced to the wei). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): -…