0x81fe3d7d35dfefa15b9e6800b6aefc3358e7b156

Reported crypto scam address

This EVM (Ethereum, BNB Chain, Base and other EVM chains) address was named in 4 public crypto scam reports: Hack. First reported 2026-04-29. Last updated 2026-10-16.

giddyvaultv3 compound auth exploit (2026-04-23) — attacker addresses

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

giddyvaultv3 compound auth exploit on EVM, 2026-04-23. DeFiHackLabs summary: GiddyVaultV3 - Incomplete Signature Coverage. Loss as recorded by DeFiHackLabs: ~$1.3M. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x81fe3d7d35dfefa15b9e6800b6aefc3358e7b156 — labeled "attacker" (EVM) - 0x7326a1ab0d696ae317958d136d6e4c693ea34528 — labeled "attack contract" (EVM) Sources: https://github.…

Other addresses in this report: 0x7326a1ab0d696ae317958d136d6e4c693ea34528

giddyvaultv3 compound auth exploit (2026-04-23) — attacker addresses

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

giddyvaultv3 compound auth exploit on EVM, 2026-04-23. DeFiHackLabs summary: GiddyVaultV3 - Incomplete Signature Coverage. Loss as recorded by DeFiHackLabs: ~$1.3M. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x81fe3d7d35dfefa15b9e6800b6aefc3358e7b156 — labeled "attacker" (EVM) - 0x7326a1ab0d696ae317958d136d6e4c693ea34528 — labeled "attack contract" (EVM) Sources: https://github.…

Other addresses in this report: 0x7326a1ab0d696ae317958d136d6e4c693ea34528

Giddy Exploited

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Project or site name: Giddy
  • Reported: 2026-04-29
  • Last updated: 2026-04-29

The attacker held fresh valid VaultAuth signatures from an authorized signer, but the EIP-712 digest only bound nonce/deadline/amount and keccak256(http://swap.data).

Other addresses in this report: 0x7da8b4bbb1aec79d1a0466a980f1e81f61ea8f20, 0x4111b48d1d181c72245c5bf25f7cd49a1745e0f0, 0xac0cfa7742069a8af0c63e14ffd0fe6b3e1bf8d2, 0x3656738d0a9ea20f3fdd4690e81247f10fc70e50

Report a crypto scam · How to report a crypto scam