0xab74fbd735cd2ed826b64e0f850a890930a91094

HPAY exploit (2022-10-18) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

HPAY exploit on EVM, 2022-10-18. DeFiHackLabs summary: HPAY - Access Control. Loss as recorded by DeFiHackLabs: ~115 BNB. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xaB74FBd735Cd2ED826b64e0F850a890930A91094 — labeled "attacker" (EVM) Sources: https://github.com/SunWeb3Sec/DeFiHackLabs/blob/main/src/test/2022-10/HPAY_exp.sol Confidence: Medium — labels come from the DeFiHackLabs community PoC repository and the alert…