0x77071d2bbd8f3c296c8cd7d0abd21bc172420cda

Order Factory exploit (2026-09-08) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

Order Factory exploit on EVM, 2026-09-08. DeFiHackLabs summary: OrderFactory - missing access control on createOrderForBuyer drains buyer accounts. Loss as recorded by DeFiHackLabs: ~20.247 ETH this tx (5 buyers drained; reported incident total ~24.7 ETH). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x77071d2bbd8f3c296c8cd7d0abd21bc172420cda — labeled "attacker" (EVM) Sources: ht…