Suspected DPRK-linked SquidSquad theft of about $2.84M (BNB Chain, 2026-10-08): theft address, Tornado Cash withdrawals and Tron consolidation address
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: SquidSquad (suspected DPRK-linked)
- Incident date: 2026-10-08
- Reported: 2026-10-21
- Last updated: 2026-10-21
An institutional entity is suspected to have lost about $2.84M on BNB Chain on 2026-10-08 to a theft that on-chain investigator ZachXBT links to the DPRK-linked group SquidSquad. According to ZachXBT, on 2026-10-20 the attacker moved 1,111.2 ETH through Tornado Cash and then bridged the funds to Tron. This report lists the theft address, the three Tornado Cash withdrawal addresses and the two Tron consolidation addresses he published. Source: ZachXBT's public Telegram channel, post of 2026-10-21 05:45 UTC (https://t.me/investigations/368). Addresses: - 0…
Other addresses in this report: 0x049b1ecce5e2fb254821bc9dc3ae98c5a6eb7e80, 0xb8b25f535a6e51d0b18c48941d791c7e83559d2b, 0x35c72e26f6888b4cba8668c6cfa4143599680bfe, TEvUsnwXvprdvB7eNGiqh6rDiMqFiC8TBU, TVxzjnx3GPDTciiuagXPaUbU5f5y13Voux