BigONE exchange exploit follow-up (2025-07-15): attacker's Bitcoin and two Solana addresses named by SlowMist and Lookonchain
- Scam type: Hack
- Chain: Bitcoin
- Project or site name: BigONE
- Incident date: 2025-07-15
- Reported: 2026-10-24
- Last updated: 2026-10-24
Follow-up to our report on the July 2025 BigONE exchange exploit, a supply-chain attack with losses of more than $27M (https://blockint.ai/c3?report=3964a727-166c-4070-9461-ef74c3343a98). That report listed the attacker's EVM and TRON addresses. It quoted the Bitcoin address in its text only and cut the Solana addresses short. This report lists the attacker's Bitcoin address and both Solana addresses. Addresses: - bc1qwxm53zya6cuflxhcxy84t4c4wrmgrwqzd07jxm (Bitcoin) - HSr1FNv266zCnVtUdZhfYrhgWx1a4LNEpMPDymQzPg4R (Solana) - 7RWHQ7ujSFwokAPkAhHTdiPxRF2LmqrvgYEqDiAjLxdH (Solana) Sources, re-read…
Other addresses in this report: HSr1FNv266zCnVtUdZhfYrhgWx1a4LNEpMPDymQzPg4R, 7RWHQ7ujSFwokAPkAhHTdiPxRF2LmqrvgYEqDiAjLxdH
Linked reports: BigONE exploit — attacker addresses (via rekt.news sources)