MakerDAO legacy auction-keeper drain follow-up (2026-10-06): malicious adapter module created by the attack contract, per CertiK
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: MakerDAO
- Incident date: 2026-10-06
- Reported: 2026-10-24
- Last updated: 2026-10-24
Follow-up to our report on the 2026-10-06 drain of a legacy third-party MakerDAO auction-keeper contract (200 ETH, about $543K) (https://blockint.ai/c3?report=d3e319e8-64bc-439c-b205-021d4823e383). That report listed the attacker's EOA and attack contract. It named CertiK's "malicious adapter" in its text only, because the address list rejected that checksum form at the time. The lowercase form is accepted, so this report lists it. Address (Ethereum): - 0xf09a13072ed939b79bc25b66aa3a836ea6dcc170 (malicious adapter module) Source: CertiK, "MakerDAO legacy auction keeper incident analysis",…
Linked reports: MakerDAO legacy ETH-A auction keeper drain — attacker addresses