0x6c3f90f043a72fa612cbac8115ee7e52bde6e490

DeFi Exploit: Wintermute - REKT 2

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-27
• Last updated: 2026-04-27

DeFi Exploit: Wintermute - REKT 2 Date: 09/20/2022 Loss: $162,300,000 USD Tags: Wintermute, Profanity, REKT Summary: Wintermute have lost over $160M to their second incident this summer. Using a vanity address for "gas savings" has cost them dearly. Last time, funds were returned, will Wintermute get lucky again? Exploit/attacker addresses extracted from on-chain analysis and incident reports. Reference: https://rekt.news/wintermute-rekt-2 Source: https://de.fi/rekt-database

Other addresses in this report: 0xe74b28c2eae8679e3ccc3a94d5d0de83ccb84705, 0x6ae09ac63487fcf63117a6d6fafa894473d47b93, 0x87969ef4811981b72a7d05d647281c8ece046beb, 0xaa030f95c338c604550d5d2000146c013b406ae0, 0x00000000ae347930bd1e7b0f35588b92280f9e75, 0x0248f752802b2cfb4373cc0c3bc3964429385c26, 0x0000000fe6a514a32abdcdfcc076c85243de899b

Attributed Threat Actor Addresses

• Scam type: Fraud
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-26
• Last updated: 2026-04-26

Cryptocurrency addresses with threat actor attribution from entity attribution data. Cross-platform correlation of Telegram, forum, and blockchain data.

Other addresses in this report: 0xeea81c4416d71cef071224611359f6f99a4c4294, 0xeefb83a6ec983ae4556b60cff1fb25e68f16a6ea, 0x235381785e74d074e1a58808a4dabb666a70a6ed, 0x82dccf206ae2ab46e2099e663f70dee77cae7778, 0x9e0787a1a50b40d59d877a0f914abd0c6a2ae9b6, 0x4d34e61caf7a3622759d69e48ccdeb8dee5021e8, 0x8db14bdcc5a12e00f3ddc86d26c82a3f262a4a9a, 0xbe2699e0e244cc5448579336de0f4b308325d2fd, 0xa0104fd8afbe3cf0b8b21ccf0890a8100941cf2d, 0x2b5276dd81e6add20cd1731d71a290e36f3da830, 0x0f9493e32b7094703a32b6c152ee06a4dd480099, 0x1b03d708aee5bdc46dbb09537ce455e1f75adc4d, 0x0bb9fc3ba7bcf6e5d6f6fc15123ff8d5f96cee00, 0xe40e1e50479f7dab9c29ffc05309c73954fdf2b5, 0x6ac12a9462a4aebb4773d26c14e923d0f800abbf, 0x3e47520b419165c53bb26dee8a6c02e60f9320b1, 0x8459e5038a80075f14196332835d29d770491fe9, 0x51a5d2c9e91df18af3cbbdc7715f0df609260815, 0xa7a67b94dbbdf9e5fe819384e0dd549494e71584, 0x58aa116f45a82075a4f1ea8199cbc8f33cc869b5 and 28 more

Wintermute (2) Exploit — Attacker Address

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-22
• Last updated: 2026-04-22

Ethereum address belonging to the attacker who exploited Wintermute (2). Total stolen: $162,300,000 USD. Source: rekt.news (https://rekt.news/wintermute-rekt-2). This address was used to receive or launder stolen funds from the Wintermute (2) protocol exploit.