Anyswap WETHPermit exploit (2025-07-29) — attacker addresses

• Scam type: Hack
• Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
• Reported: 2026-10-15
• Last updated: 2026-10-16

Anyswap WETHPermit exploit on EVM, 2025-07-29. DeFiHackLabs summary: AnyswapWETHPermit - Permit Validation Bypass. Loss as recorded by DeFiHackLabs: 200 WETH. Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): - 0xC0ffeEBABE5D496B2DDE509f9fa189C25cF29671 — labeled "attacker" (EVM) - 0xE08D97e151473A848C3d9CA3f323Cb720472D015 — labeled "attack contract" (EVM) Sources: https://github.com/Su…

Other addresses in this report: 0xc0ffeebabe5d496b2dde509f9fa189c25cf29671, 0xe08d97e151473a848c3d9ca3f323cb720472d015