After a year of silence, suddenly selling off $2 million worth of crypto assets, DeFi hacker linked wallet appears again

ETH0,1%
UNI1,16%
CRV2,49%
YFI1,06%

A Ethereum wallet associated with multiple high-profile DeFi hacking incidents suddenly resumed activity after approximately 12 months of silence, sparking significant market attention. On-chain data shows that the wallet recently sold off over $2 million worth of various mainstream cryptocurrencies, highlighting the ongoing risks of cryptocurrency theft.

According to on-chain analysis platform Lookonchain, on December 30th, this Ethereum address sold large amounts of tokens including UNI, LINK, CRV, and YFI in a single transaction. The sale included approximately 226,961 UNI tokens worth about $1.36 million; 33,215 LINK tokens valued at nearly $410,000; 845,806 CRV tokens worth around $328,000; and more than 5 YFI tokens valued at approximately $17,500. Additionally, the address also liquidated or reduced holdings of other tokens.

On-chain tracking indicates that this wallet is closely linked to the 2021 Indexed Finance hack and the 2023 KyberSwap attack. Indexed Finance was attacked that year due to flash loan and price manipulation vulnerabilities, resulting in losses of about $16.5 million. The attacker claimed their actions complied with smart contract rules, sparking widespread controversy over DeFi mechanism design.

Later, in November 2023, the Elastic liquidity pool of KyberSwap was repeatedly exploited across multiple blockchains, draining nearly $49 million. Following the attack, the hacker even attempted to extort the protocol team by offering to return some assets, further shaking the market.

In February 2025, U.S. law enforcement released indictment documents accusing 22-year-old Canadian suspect Medjedovic of carrying out the two aforementioned attacks. Prosecutors stated that he laundered the stolen assets through mixers and cross-chain bridges, and pressured the KyberSwap team after the attacks. The suspect remains at large.

The reactivation of this wallet also reflects the severe risks of cryptocurrency theft in 2025. According to Chainalysis data, the estimated losses from crypto asset theft in 2025 range between $2.7 billion and $3.4 billion. Over 60% of these losses are related to centralized platforms, and many incidents are believed to be connected to North Korean hacking organizations. Although the average loss per individual wallet has decreased, the overall security situation remains grim.

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Claude code leak sparks an LLM crisis, hackers have stolen researchers’ ETH

Security research reveals that in the LLM agent ecosystem, over 20% of free API routers actively inject malicious code, leading to asset theft and credential crises. In addition, the Claude code-leak incident has enabled attackers to spread malware by exploiting developers’ curiosity. The research team proposes a three-layer defense mechanism to address supply-chain security risks.

MarketWhisper3h ago

Solayer founder issues a warning: AI agent routers face malicious injection risks, and ETH is being stolen

Solayer’s founder exposes a security vulnerability in large language model (LLM) routers; in 428 routers, more than 20% exhibit malicious behavior, such as private keys being stolen. The research recommends that developers implement a separate end-to-end integrity verification mechanism on the client side and provides three defense options to mitigate supply-chain attacks.

MarketWhisper3h ago

Giant whale “first set 10 big goals” keeps adding to BTC and ETH short positions, with a position size of up to $270 million

Gate News announcement, April 10, the whale “sets 10 big targets first” (social media account @Jason60704294) has updated its latest positions. Currently, total unrealized profit is $644k. The specific holdings include: BTC short positions of 2567.49 units, entry price $71,554.61, unrealized loss of $644k; ETH short positions of 38,465.22 units, entry price $2,248.74, unrealized profit of $1.37M.

GateNews4h ago

Ethereum’s staking rate hits a record high, with staked ETH valued at about $85 billion

Gate News message: On April 10, according to Token Terminal data, Ethereum’s staking rate hit a record high. Currently, the network is secured by staked ETH with a value of about $85.0 billion.

GateNews4h ago

Today, BTC and ETH options with a nominal value of $2.27 billion expire, and the IV index drops sharply

On April 10, 27k BTC options and 151k ETH options expired, with Put Call Ratios of 0.71 and 0.77, respectively. Bitcoin broke above $72,000 on news of a U.S.-Iran ceasefire, but the overall market is still in a correction phase, and implied volatility has fallen significantly.

GateNews4h ago
Comment
0/400
No comments