Skip to main content
AVOID.NET

Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)

avoid.net/crypto-whale-25-6m-repeat-phishing-drain-august-2026→0/100·82% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2P7AgJ…u7dm
last updated 2026-08-25

Summary

On August 12, 2026, an unidentified Ethereum whale wallet was drained of approximately $25.6 million in WBTC, cbBTC, LDO, USDS, and CRV through a phishing attack — the second major exploitation of the same address, which had previously lost $24.2 million to a phishing incident in September 2023. The stolen assets were swapped to approximately 20 million DAI and 3,000 ETH and traced by PeckShield to four distinct attacker-controlled addresses. This page documents the phishing infrastructure and repeat-targeting pattern rather than the victim; the victim is the unnamed whale wallet, not a threat actor.

Connected Entities

11 entities · 60 linked investigations
Organizations
□Ethereum64□USDS□Harmony Bridge□Rocket Pool
Exchanges
△Coinsbuy Exchange
Protocols
⌂FixedFloat10⌂Uniswap
Tokens
♦Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)♦Coinsbuy♦Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)♦Bitcoin
Relationships
  • USDS→mentioned with→Ethereum(70%)
  • Harmony Bridge→mentioned with→Bitcoin(75%)
  • Harmony Bridge→mentioned with→Ethereum(80%)
  • Ethereum→mentioned with→Bitcoin(60%)
  • Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)→mentioned with→USDS(70%)
  • Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)→mentioned with→Coinsbuy(70%)
  • Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)→mentioned with→Ethereum(80%)
  • Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)→mentioned with→Bitcoin(65%)
  • Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)→mentioned with→Harmony Bridge(70%)
  • Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)→mentioned with→FixedFloat(80%)
  • + 17 more
Have evidence about Crypto Whale — $25.6M Repeat Phishing Drain (August 2026)?
0
Accepted
1
Under review
0
Rejected / revoked

1 submission awaiting moderator review.

Timeline(4 events)

6 September 2023

An Ethereum whale wallet (partially identified as 0x13e382...) lost approximately $24.23 million in rETH and stETH after signing malicious increaseAllowance transactions. Funds moved to attacker addresses 0x693b72 and 0x4c10a4, with a portion routed through FixedFloat.

BeinCrypto, Scam Sniffer, CryptoSlate

July 2024

Approximately ten months after the 2023 theft, the 2023 attacker returned approximately $9.3 million in DAI to the victim in two transfers ($5.23 million and $4.04 million), representing roughly 90% restitution of the 2023 loss.

CryptoPotato, Startup Fortune

12 August 2026

The same Ethereum whale wallet was drained of approximately $25.6 million in WBTC, cbBTC, LDO, USDS, and CRV via a phishing attack. Stolen assets were swapped to approximately 20 million DAI and 3,000 ETH. PeckShield traced proceeds to four attacker-controlled addresses. On-chain investigator Specter identified attacker address 0x8fEB...F95Ae.

PeckShield, Crypto Times, Tron Weekly, BeinCrypto

16 August 2026

Crypto Times reported the week of August 9–15 as producing over $37 million in confirmed crypto theft across multiple incidents, with the whale phishing drain being the single largest loss of the week.

Crypto Times
Provenance & Audit Trail

Decision Log

  • #4reviewRecorded on Solana ✓9/9/2026, 3:05:18 AM
    slot 445507038 · hash 2uYLLAX36W3Ptq7GEeGKrhER1Axwvb3Q3VHfDr2VuFMc
  • #3review revise-14Recorded on Solana ✓8/25/2026, 3:11:22 AM
    slot 443510841 · hash AkKdcMTaq6WAvpno4KCCtWs2SkTx2xavgaZtsY9gdfk3
  • #2reviewRecorded on Solana ✓8/25/2026, 3:11:22 AM
    slot 443510828 · hash hh2JCYFL6DbKEpLNBmmPcWFA8xeEgUkKok2sQDB6aaz
  • #1publishRecorded on Solana ✓8/23/2026, 12:09:14 PM
    slot 443510008 · hash 4XKMDdsEdLHqjkZEbYmySPBaUBtVUx3UKRjdJ7KSsvwh

This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 12 of 12 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-09-0725 claims checked3 corrections pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 8/23/2026, 12:09:05 PM

last updated: 8/25/2026, 3:11:22 AM

6 views

avoid.net — verified advice for a post-truth world