Flamincome exploit (2026-09-16) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
Flamincome exploit on EVM, 2026-09-16. DeFiHackLabs summary: Flamincome - permissionless Convex stakeFor inflates Strategy NAV and lets VaultYUSDT overpay on withdrawAll. Loss as recorded by DeFiHackLabs: ~$345.9K USDT net attacker profit (gross Strategy loss ~$595K in aUSDT+USDT). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x83381e7F7232775735169d72D237B858fFc36871 — labeled "attacker" (EVM) Sources:…