{"id":41921,"date":"2026-05-01T15:36:53","date_gmt":"2026-05-01T15:36:53","guid":{"rendered":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/"},"modified":"2026-05-01T15:36:53","modified_gmt":"2026-05-01T15:36:53","slug":"old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k","status":"publish","type":"post","link":"https:\/\/cryptd.in\/sv\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/","title":{"rendered":"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K"},"content":{"rendered":"

This week, hundreds of Ethereum wallets, many of them inactive for seven years or more, were drained in what on-chain observers dubbed a live draining campaign associated with the same attacker addresses.<\/p>\n

According to some, losses have already passed $800,000.<\/p>\n

What Happened and What We Know So Far<\/h2>\n

One victim, posting under the handle Capitulation.eth, was the first to sound the alarm, saying<\/a> that funds had left their wallet without authorization and noting that others were being \u201czeroed out\u201d as well.<\/p>\n

This was confirmed by crypto analyst Wazz, who delad<\/a> on-chain data showing a single address sweeping wallets that had last moved funds as far back as 2019.<\/p>\n

Another analyst, Specter, put the victim count in the hundreds and estimated<\/a> total losses above $800,000. According to them, the attacker deposited 2 ETH to an exchange, likely converted to Monero, and separately bridged 324 ETH, worth around $734,000, to the Bitcoin network via Thorchain.<\/p>\n

What is striking about the attack is the age of the wallets involved. Specter noted that most affected wallets were created between four and eight years ago, with very few exceptions.<\/p>\n

Community researchers largely agree that this is not a smart contract vulnerability or a token approval exploit. Developer Fitna was direct about it:<\/p>\n

\n

\u201cOld secret keys and seed phrases leaked years ago from bad wallet apps, weak randomness, stolen backups, LastPass, cloud leaks, or old 2017\/18 software. Hacker is now draining leftover ETH.\u201d<\/p>\n<\/blockquote>\n

Cryptographer Mikerah offered a similar read, suggesting<\/a> the pattern points to an older key generation process that used weak entropy, adding that the scenario is \u201creally scary to think about.\u201d<\/p>\n

Developer Rahul Saxena used the incident to urge<\/a> users to check wallets for old token approvals and pointed to revoke.cash as a tool to remove them, though Fitna and others stressed that approval scams are separate from what appears to be happening here.<\/p>\n

April Was Already a Terrible Month for DeFi Security<\/h2>\n

This attack landed on the final day of what analyst Abdul described<\/a> as \u201cthe worst month ever in terms of DeFi exploits,\u201d with roughly $635 million lost across 28 incidents in 30 days.<\/p>\n

The list runs from a $285 million exploit<\/a> at Drift on April 1 through a $5 million-plus hit on Wasabi Protocol on the same day the dormant wallet drain was flagged.<\/p>\n

The month\u2019s largest single incident was the KelpDAO exploit on April 18, in which attackers drained<\/a> nearly $294 million from the liquid restaking protocol\u2019s bridge contract, converting stolen funds into ETH and spreading them across Ethereum and Arbitrum.<\/p>\n

An attack on Syndicate Network, reported on April 29, added<\/a> another $330,000 to the total when an address acquired 18.5 million SYND tokens through a bridge compromise and sold them, sending SYND down more than 37% in 24 hours.<\/p>\n

Inl\u00e4gget Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K<\/a> publicerades f\u00f6rst p\u00e5 CryptoPotato<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

This week, hundreds of Ethereum wallets, many of them inactive for seven years or more, were drained in what on-chain observers dubbed a live draining campaign associated with the same attacker addresses. According to some, losses have already passed $800,000. What Happened and What We Know So Far One victim, posting under the handle Capitulation.eth, […]<\/p>\n","protected":false},"author":1,"featured_media":41923,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-41921","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-feeds"],"yoast_head":"\nOld Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K - cryptd.in<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptd.in\/sv\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/\" \/>\n<meta property=\"og:locale\" content=\"sv_SE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K - cryptd.in\" \/>\n<meta property=\"og:description\" content=\"This week, hundreds of Ethereum wallets, many of them inactive for seven years or more, were drained in what on-chain observers dubbed a live draining campaign associated with the same attacker addresses. According to some, losses have already passed $800,000. What Happened and What We Know So Far One victim, posting under the handle Capitulation.eth, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptd.in\/sv\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/\" \/>\n<meta property=\"og:site_name\" content=\"cryptd.in\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-01T15:36:53+00:00\" \/>\n<meta name=\"author\" content=\"cryptd.in\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Skriven av\" \/>\n\t<meta name=\"twitter:data1\" content=\"cryptd.in\" \/>\n\t<meta name=\"twitter:label2\" content=\"Ber\u00e4knad l\u00e4stid\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuter\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/\"},\"author\":{\"name\":\"cryptd.in\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/person\\\/7973e8183bc6723b86adfe84d5af0ce4\"},\"headline\":\"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K\",\"datePublished\":\"2026-05-01T15:36:53+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/\"},\"wordCount\":470,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Exploit_hack-hjQbJn.jpg\",\"articleSection\":[\"Feeds\"],\"inLanguage\":\"sv-SE\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/\",\"url\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/\",\"name\":\"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K - cryptd.in\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Exploit_hack-hjQbJn.jpg\",\"datePublished\":\"2026-05-01T15:36:53+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#breadcrumb\"},\"inLanguage\":\"sv-SE\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sv-SE\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#primaryimage\",\"url\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Exploit_hack-hjQbJn.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Exploit_hack-hjQbJn.jpg\",\"width\":1201,\"height\":720},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptd.in\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#website\",\"url\":\"https:\\\/\\\/cryptd.in\\\/\",\"name\":\"cryptd.in\",\"description\":\"Alternative LinkedIn for Crypto-friendly Talents\",\"publisher\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptd.in\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sv-SE\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#organization\",\"name\":\"cryptd.in\",\"url\":\"https:\\\/\\\/cryptd.in\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sv-SE\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/cryptdin_logo.jpg\",\"contentUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/cryptdin_logo.jpg\",\"width\":900,\"height\":900,\"caption\":\"cryptd.in\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/#\\\/schema\\\/person\\\/7973e8183bc6723b86adfe84d5af0ce4\",\"name\":\"cryptd.in\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sv-SE\",\"@id\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/litespeed\\\/avatar\\\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1777398871\",\"url\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/litespeed\\\/avatar\\\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1777398871\",\"contentUrl\":\"https:\\\/\\\/cryptd.in\\\/wp-content\\\/litespeed\\\/avatar\\\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1777398871\",\"caption\":\"cryptd.in\"},\"sameAs\":[\"http:\\\/\\\/cryptd.in\"],\"url\":\"https:\\\/\\\/cryptd.in\\\/sv\\\/author\\\/cryptd-in\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K - cryptd.in","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptd.in\/sv\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/","og_locale":"sv_SE","og_type":"article","og_title":"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K - cryptd.in","og_description":"This week, hundreds of Ethereum wallets, many of them inactive for seven years or more, were drained in what on-chain observers dubbed a live draining campaign associated with the same attacker addresses. According to some, losses have already passed $800,000. What Happened and What We Know So Far One victim, posting under the handle Capitulation.eth, […]","og_url":"https:\/\/cryptd.in\/sv\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/","og_site_name":"cryptd.in","article_published_time":"2026-05-01T15:36:53+00:00","author":"cryptd.in","twitter_card":"summary_large_image","twitter_misc":{"Skriven av":"cryptd.in","Ber\u00e4knad l\u00e4stid":"2 minuter"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#article","isPartOf":{"@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/"},"author":{"name":"cryptd.in","@id":"https:\/\/cryptd.in\/#\/schema\/person\/7973e8183bc6723b86adfe84d5af0ce4"},"headline":"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K","datePublished":"2026-05-01T15:36:53+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/"},"wordCount":470,"commentCount":0,"publisher":{"@id":"https:\/\/cryptd.in\/#organization"},"image":{"@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/05\/Exploit_hack-hjQbJn.jpg","articleSection":["Feeds"],"inLanguage":"sv-SE","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/","url":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/","name":"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K - cryptd.in","isPartOf":{"@id":"https:\/\/cryptd.in\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#primaryimage"},"image":{"@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#primaryimage"},"thumbnailUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/05\/Exploit_hack-hjQbJn.jpg","datePublished":"2026-05-01T15:36:53+00:00","breadcrumb":{"@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#breadcrumb"},"inLanguage":"sv-SE","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/"]}]},{"@type":"ImageObject","inLanguage":"sv-SE","@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#primaryimage","url":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/05\/Exploit_hack-hjQbJn.jpg","contentUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2026\/05\/Exploit_hack-hjQbJn.jpg","width":1201,"height":720},{"@type":"BreadcrumbList","@id":"https:\/\/cryptd.in\/old-ethereum-wallets-drained-in-coordinated-attack-losses-pass-800k\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptd.in\/"},{"@type":"ListItem","position":2,"name":"Old Ethereum Wallets Drained in Coordinated Attack, Losses Pass $800K"}]},{"@type":"WebSite","@id":"https:\/\/cryptd.in\/#website","url":"https:\/\/cryptd.in\/","name":"cryptd.in","description":"Alternativ LinkedIn f\u00f6r kryptov\u00e4nliga talanger","publisher":{"@id":"https:\/\/cryptd.in\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptd.in\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sv-SE"},{"@type":"Organization","@id":"https:\/\/cryptd.in\/#organization","name":"cryptd.in","url":"https:\/\/cryptd.in\/","logo":{"@type":"ImageObject","inLanguage":"sv-SE","@id":"https:\/\/cryptd.in\/#\/schema\/logo\/image\/","url":"https:\/\/cryptd.in\/wp-content\/uploads\/2024\/05\/cryptdin_logo.jpg","contentUrl":"https:\/\/cryptd.in\/wp-content\/uploads\/2024\/05\/cryptdin_logo.jpg","width":900,"height":900,"caption":"cryptd.in"},"image":{"@id":"https:\/\/cryptd.in\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/cryptd.in\/#\/schema\/person\/7973e8183bc6723b86adfe84d5af0ce4","name":"cryptd.in","image":{"@type":"ImageObject","inLanguage":"sv-SE","@id":"https:\/\/cryptd.in\/wp-content\/litespeed\/avatar\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1777398871","url":"https:\/\/cryptd.in\/wp-content\/litespeed\/avatar\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1777398871","contentUrl":"https:\/\/cryptd.in\/wp-content\/litespeed\/avatar\/0b38230b9c4987de71d8ea131b2d0c60.jpg?ver=1777398871","caption":"cryptd.in"},"sameAs":["http:\/\/cryptd.in"],"url":"https:\/\/cryptd.in\/sv\/author\/cryptd-in\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/posts\/41921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/comments?post=41921"}],"version-history":[{"count":0,"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/posts\/41921\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/media\/41923"}],"wp:attachment":[{"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/media?parent=41921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/categories?post=41921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptd.in\/sv\/wp-json\/wp\/v2\/tags?post=41921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}