XLoot Staking exploit (2026-04-15) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
XLoot Staking exploit on EVM, 2026-04-15. DeFiHackLabs summary: XLootStaking - Duplicate xLOOT Redemption. Loss as recorded by DeFiHackLabs: 6.21 ETH. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xAcDcD2e9787E889305200900d6Cf6C0548578630 — labeled "attacker" (EVM) - 0xd8A948b2ee03165a3c6b8940837bab664BC5CF4d — labeled "attack contract" (EVM) Sources: https://github.com/SunWeb3Sec…
Other addresses in this report: 0xacdcd2e9787e889305200900d6cf6c0548578630