- Scam type: Hack
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Reported: 2026-04-27
- Last updated: 2026-04-27
DeFi Exploit: Drained By Design Date: 8/13/2025 Loss: $550,000 USD Tags: Coinbase, MEV, ERC-20 approvals Summary: A $550K lesson - Coinbase lost funds after granting ERC-20 approvals to 0xProject's permissionless Settler contract - exactly what their docs warn against. An MEV bot exploited the permissions to drain hundreds of tokens, adding to ongoing security failures investigators have highlighted. Exploit/attacker addresses extracted from on-chain analysis and incident reports. Reference: https://rekt.news/drained-by-design Source: https://de.fi/rekt-database
Other addresses in this report: 0xac13439d598cd1a60c14c965ed0fa7c46cb0d89d, 0x382ffce2287252f930e1c8dc9328dac5bf282ba1, 0x17f79e70ae89c6e32a9244d3d57b7aa648246468