0xb929c7215c0ec8ebad5fbf73b1da63bccfff1896

Router Drain exploit (2026-09-07) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

Router Drain exploit on EVM, 2026-09-07. DeFiHackLabs summary: RouterDrain - permissionless swap entry lets a fake V3 pool abuse router allowances. Loss as recorded by DeFiHackLabs: ~62.28 WBNB across 29 victims (3 reconstructed here: OCEAN, Kandura, SATURN). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xB929C7215c0ec8EbAD5fBf73b1Da63bccfFf1896 — labeled "attacker" (EVM) Sources:…

Reflexer GEB exploit (2026-09-01) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

Reflexer GEB exploit on Ethereum, 2026-09-01. DeFiHackLabs summary: ReflexerGEB - Shared GebProxyActions library registered as SAFE owner. Loss as recorded by DeFiHackLabs: ~5.94 ETH (~$14K). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xb929c7215c0ec8ebad5fbf73b1da63bccfff1896 — labeled "attacker" (Ethereum; https://etherscan.io/address/0xb929c7215c0ec8ebad5fbf73b1da63bccfff1896) -…

Other addresses in this report: 0x6a213f0b5bd9eed865d3e2efc867b73dfe9039e7