0x87969ef4811981b72a7d05d647281c8ece046beb

Wintermute exploit — attacker addresses (rekt.news)

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-14
• Last updated: 2026-10-16

Wintermute incident as documented by rekt.news (https://rekt.news/wintermute-rekt-2). Incident date per rekt.news: 09/20/2022. Amount lost per rekt.news leaderboard: $162,300,000 (USD at time of incident). Addresses below are those the rekt.news article itself labels as attacker/exploiter/hacker addresses or attacker contracts (linked to block explorers), copied verbatim from the article: - 0xe74b28c2eAe8679e3cCc3a94d5d0dE83CCB84705 (Ethereum; explorer link in article: https://etherscan.io/address/0xe74b28c2eAe8679e3cCc3a94d5d0dE83CCB84705) — article context: "Hacker’s address:…

Other addresses in this report: 0xe74b28c2eae8679e3ccc3a94d5d0de83ccb84705

DeFi Exploit: Wintermute - REKT 2

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-27
• Last updated: 2026-04-27

DeFi Exploit: Wintermute - REKT 2 Date: 09/20/2022 Loss: $162,300,000 USD Tags: Wintermute, Profanity, REKT Summary: Wintermute have lost over $160M to their second incident this summer. Using a vanity address for "gas savings" has cost them dearly. Last time, funds were returned, will Wintermute get lucky again? Exploit/attacker addresses extracted from on-chain analysis and incident reports. Reference: https://rekt.news/wintermute-rekt-2 Source: https://de.fi/rekt-database

Other addresses in this report: 0x6c3f90f043a72fa612cbac8115ee7e52bde6e490, 0xe74b28c2eae8679e3ccc3a94d5d0de83ccb84705, 0x6ae09ac63487fcf63117a6d6fafa894473d47b93, 0xaa030f95c338c604550d5d2000146c013b406ae0, 0x00000000ae347930bd1e7b0f35588b92280f9e75, 0x0248f752802b2cfb4373cc0c3bc3964429385c26, 0x0000000fe6a514a32abdcdfcc076c85243de899b

Wintermute (2) Exploit — Attacker Address

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-22
• Last updated: 2026-04-22

Ethereum address belonging to the attacker who exploited Wintermute (2). Total stolen: $162,300,000 USD. Source: rekt.news (https://rekt.news/wintermute-rekt-2). This address was used to receive or launder stolen funds from the Wintermute (2) protocol exploit.