0x9abe851bcc4fd1986c3d1ef8978fad86a26a0c57

RBalancer exploit (2023-11-07) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

RBalancer exploit on Ethereum, 2023-11-07. DeFiHackLabs summary: RBalancer - Business Logic Flaw. Loss as recorded by DeFiHackLabs: ~17 ETH. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0x9abe851bcc4fd1986c3d1ef8978fad86a26a0c57 — labeled "attacker" (Ethereum; https://etherscan.io/address/0x9abe851bcc4fd1986c3d1ef8978fad86a26a0c57) - 0x9c52c485edd3d22847a1614b8988fbf520b33047 — labeled "attack contract" (Ethereum;…

Other addresses in this report: 0x9c52c485edd3d22847a1614b8988fbf520b33047

@BlockSecTeam: 0x9abe851bcc4fd1986c3d1ef8978fad86a26a0c57 is marked as rBalancer(Aura) exploiter on metadock but don't really see any m

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-04-25
• Last updated: 2026-04-25

Crypto crime address reported by @BlockSecTeam (BlockSec — MEV/flash loan attacks and hack addresses). Message: 0x9abe851bcc4fd1986c3d1ef8978fad86a26a0c57 is marked as rBalancer(Aura) exploiter on metadock but don't really see any mention on twitter? looks like about 33ETH loss from the vault exploit tx: https://etherscan.io/tx/0xbf5b2d22fa88965ddfc6e6d685fc7cfc683340c49e126386759ed9e4027b1415... Source: https://t.me/BlockSecTeam/5380