Internet Token exploit (2026-09-21) — attacker addresses

  • Scam type: Hack
  • Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
  • Reported: 2026-10-15
  • Last updated: 2026-10-16

Internet Token exploit on EVM, 2026-09-21. DeFiHackLabs summary: InternetToken - permissionless swapV3 with caller-supplied pool lets a fake callback mint INT arbitrarily. Loss as recorded by DeFiHackLabs: 764,145,702 INT + 5.846988 WETH (attacker minted 925.41M INT total, dumped 161.27M into the real INT/WETH pool for the WETH, reproduced to the wei). Addresses below are copied verbatim from the DeFiHackLabs proof-of-concept header for this incident, where they are explicitly labeled (attacker = attacker EOA; attack contract = contract deployed/used by the attacker): -…

Other addresses in this report: 0x5f7ce6395818857ac20730dc990f614356d1ec68

Report a crypto scam · How to report a crypto scam