y ETH exploit (2025-12-01) — attacker addresses
- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-10-15
- Last updated: 2026-10-16
y ETH exploit on EVM, 2025-12-01. DeFiHackLabs summary: yETH - Unsafe Math. Loss as recorded by DeFiHackLabs: 9M USD. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xfb63aa935cf0a003335dce9cca03c4f9c0fa4779 — labeled "attacker" (EVM) - 0xbb2789b418fa18f9526ba79fa7038d4e6d753f73 — labeled "attack contract" (EVM) Sources: https://github.com/SunWeb3Sec/DeFiHackLabs/blob/main/src/test/2025-12/yETH_exp.sol ;…
Other addresses in this report: 0xbb2789b418fa18f9526ba79fa7038d4e6d753f73