YieldBlox (Stellar Blend V2 pool) exploit follow-up (2026-02-22): four Stellar attacker accounts
- Scam type: Hack
- Chain: Stellar
- Project or site name: YieldBlox DAO pool on Blend V2 (Stellar)
- Incident date: 2026-02-22
- Reported: 2026-10-24
- Last updated: 2026-10-24
Follow-up to our YieldBlox report (https://blockint.ai/c3?report=3c675459-60ea-49fe-b95c-c8f87fc7817c), which lists the EVM attacker wallet 0x2d1ce29b.... This report adds the attacker's Stellar accounts, which blockint.ai could not accept until Stellar address support was added. It also lists two Ethereum attacker wallets from BlockSec that are already on blockint.ai in https://blockint.ai/c3?report=f81715f9-10bd-4b17-a7fe-52fc863443df. What happened, per BlockSec (https://blocksec.com/blog/yieldblox-dao-incident-on-stellar-oracle-misconfiguration-enabled-a-10m-drain): on 2026-02-22 the…
Other addresses in this report: GBO7VUL2TOKPWFAWKATIW7K3QYA7WQ63VDY5CAE6AFUUX6BHZBOC2WXC, GCNF5GNRIT6VWYZ7LXUZ33Q3SR2NUGO32F5X65VVKAEWWIQCKGYN75HB, GDHRCQNC64UVL27EXSC6OG6I2FCT4NWM72KNHLHKEB3LK4MEEYYWETN3, 0x0b2b16e1a9e2e9b15027ae46fa5ec547f5ef3ec6, 0xe69f6d77db6ff493fdd15d8a0b390c36e18e5b21
Linked reports: Yieldblox exploit — attacker addresses (rekt.news)