WAX Multi-Chain Bridge exploit (2026-10-22): attacker addresses on WAX, Ethereum and Solana, about $90.5K released without payment
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: WAX Multi-Chain Bridge
- Incident date: 2026-10-22
- Reported: 2026-10-22
- Last updated: 2026-10-22
An attacker exploited the WAX Multi-Chain Bridge on 2026-10-22 between 09:46 and 10:06 UTC (4:46-5:06 AM CT), withdrawing bridged USDC, USDT, DAI, WETH and WBTC to Solana and Ethereum without paying for them on WAX. This report lists the attacker's Ethereum and Solana addresses named by SlowMist and the two addresses the funds went to next. Sources: SlowMist on X, 2026-10-22 15:23 UTC, 10:23 AM CT (https://x.com/SlowMist_Team/status/2113290086808990182), puts the loss at about $90.5K and names the attacker's WAX account, Solana address and Ethereum address, plus the bridge's victim addresses.…
Other addresses in this report: 0x01664e199991b2f3fe412c2de5b9b7a0dcdc5070, 4H1piNZ8LsYhZGYhkbJDbPDSghxRj3HWxJqVz5dve8Q7, H15JEWrcrp1rTteRoorQTF4e54QF1QmZfxghBcT6ueo9