OMNI404 exploit (2026-09-09) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
OMNI404 exploit on EVM, 2026-09-09. DeFiHackLabs summary: OMNI404 - ERC-404 dual ID/amount transfer interpretation drains pool WETH. Loss as recorded by DeFiHackLabs: 2.427 WETH (run() leg reproduced here; ~3.02 ETH across the full 4-tx block). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xFB26db4EAb18Cb50d29Ff431888dD643A7e9C9f8 — labeled "attacker" (EVM) Sources: https://github…