0x629b368c6bf1a9f190e38f21235033fece8a6231

Reported crypto scam address

This EVM (Ethereum, BNB Chain, Base and other EVM chains) address was named in 2 public crypto scam reports: Hack. First reported 2026-10-14. Last updated 2026-10-16.

79th Vault (79AU) BNB consolidation wallets (CertiK/GoPlus)

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-14
  • Last updated: 2026-10-16

Follow-up to the 2026-10-07 79th Vault / 79AU PancakeSwap pool drain on BNB Chain (~$12.5M / ~16,249 BNB). A prior Block6iQ report covered other attacker EOAs; these addresses were not in that filing. Per CertiK Alert (https://x.com/CertiKAlert/status/2108114270559096916) and 0xCERT-2026-0231 (https://www.0xcert.com/advisory/0xCERT-2026-0231) summarizing CertiK/Defimon/GoPlus: 0x629b368c6bf1a9f190e38f21235033fece8a6231 received the ~16,249 BNB consolidation; 0xa9537B40b02Af7Af8f1543aea3691992B2174F89 held ~90% of stolen BNB (~14,395 BNB) at analysis time. Related cash-out tx cited by CertiK:…

Other addresses in this report: 0xa9537b40b02af7af8f1543aea3691992b2174f89

79th Vault (79AU) PancakeSwap pool drain - BNB Chain

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-14
  • Last updated: 2026-10-16

On 2026-10-09 PeckShield and CertiK reported the exploiter returned 15K BNB (~$11M) to the team; the rest was kept as a self-declared 'bounty'. Chain: BNB Chain. Excluded: team hot wallet, deployer, multisig, refund address. Confidence: High (multiple security firms identify the same attacker flow; most funds since returned). Source: BlockintAI research

Other addresses in this report: 0xc3e90f78a918594a605d584887b2775f4b80a099, 0xf219d0733ad6c0a3dbb36d7654ea0457dd690938, 0xe6aff02c6ffa0fa66ccafae5d9d607ea69d2f5a0, 0xa9537b40b02af7af8f1543aea3691992b2174f89, 0x1e2a669ec4e54e3960588b35eca6a075f31216a3

Report a crypto scam · How to report a crypto scam