Gravity Bridge exploit follow-up (2026-05-29): theft wallet, deployer, rogue validator 'julia666' and its Gravity, Osmosis and Ethereum keys
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Gravity Bridge
- Incident date: 2026-05-29
- Reported: 2026-10-23
- Last updated: 2026-10-23
Follow-up to our Gravity Bridge report (https://blockint.ai/c3?report=d0b59d06-3c16-415e-9c56-8375e62600a3), which lists one theft wallet. This report adds the primary theft wallet that received the USDC, USDT and WETH, the Ethereum address that set up the fake token mappings, and the attacker's Cosmos-side accounts, which blockint.ai could not accept until bech32 support was added. What happened, per rekt.news (https://rekt.news/gravity-bridge-rekt) and QuillAudits (https://www.quillaudits.com/blog/hack-analysis/gravity-bridge-demon-mapping-poisoning): the attacker registered a validator…
Other addresses in this report: 0x7b582033061b96cc3f9421e73a749ed7c62da1f9, 0x91b52e07132a49dad1b7a3939a51547f79468ec7, osmo1m9athjzah02f2mnrgtcke7e5ya3zpvw8lccuss, gravity1rdwckpx2p3mwu4k8xdz8vmd4x3mqx4v9kk6wdz, gravity1wy3cfsv4k5g0u8kxyfuyd9xm2r46l2djyu4nel
Linked reports: Gravity Bridge exploit — attacker addresses (via rekt.news sources)