0xe08d97e151473a848c3d9ca3f323cb720472d015

Reported crypto scam address

This EVM (Ethereum, BNB Chain, Base and other EVM chains) address was named in 3 public crypto scam reports: Hack. First reported 2026-10-15. Last updated 2026-10-18.

BiFi Lending USDT market exploit on Ethereum (2026-10-17): ~$165.4K drained via idle-market interest re-accrual

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Project or site name: BiFi Lending
  • Incident date: 2026-10-17
  • Reported: 2026-10-18
  • Last updated: 2026-10-18

BiFi Lending's USDT market on Ethereum lost about $165.4K (about 165.6K USDT) when a flash-loan-funded transaction re-applied about 36 days of stored idle interest many times inside one block. This report lists the exploit transaction's sender and the bot contract that ran it. Source: DefimonAlerts on X, 2026-10-18 07:45 UTC (https://x.com/DefimonAlerts/status/2111725425554571750); oculr exploit report "Interest Accounting Exploit on BiFi results in $165.4K worth of USDT being stolen" (https://www.oculr.xyz/reports/bifi-exploit-2026-10-18). What happened: BiFi's USDT market had been idle for…

Other addresses in this report: 0xc0ffeebabe5d496b2dde509f9fa189c25cf29671

DRLVault V3 exploit (2025-11-10) — attacker addresses

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

DRLVault V3 exploit on Ethereum, 2025-11-10. DeFiHackLabs summary: DRLVaultV3 - Price Manipulation. Loss as recorded by DeFiHackLabs: 100K USDT. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xC0ffeEBABE5D496B2DDE509f9fa189C25cF29671 — labeled "attacker" (Ethereum; https://etherscan.io/address/0xC0ffeEBABE5D496B2DDE509f9fa189C25cF29671) - 0xe08d97e151473a848c3d9ca3f323cb720472d015 — labeled "attack contract" (Ethereum;…

Other addresses in this report: 0xc0ffeebabe5d496b2dde509f9fa189c25cf29671

Anyswap WETHPermit exploit (2025-07-29) — attacker addresses

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

Anyswap WETHPermit exploit on EVM, 2025-07-29. DeFiHackLabs summary: AnyswapWETHPermit - Permit Validation Bypass. Loss as recorded by DeFiHackLabs: 200 WETH. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xC0ffeEBABE5D496B2DDE509f9fa189C25cF29671 — labeled "attacker" (EVM) - 0xE08D97e151473A848C3d9CA3f323Cb720472D015 — labeled "attack contract" (EVM) Sources: https://github.com/Su…

Other addresses in this report: 0xc0ffeebabe5d496b2dde509f9fa189c25cf29671

Report a crypto scam · How to report a crypto scam