ChainCatcher message, according to cosine detection, the EVM (ETH/BSC/BASE) address of the DEXX hacker has started to show unusual activity, with a significant amount of funds (including many MEME) continuously being aggregated into 0xffb9926310b291e17d7df846cded66cda2c68228 since around 7 AM.

ChainCatcher news, according to on-chain security monitoring agency BitJungle, the hacker address that stole the private keys of the DeFi blogger "Mining Little Penguin" has shown signs of activity after being silent for one year and ten months.The hacker has converted 4 million DAI into ETH, of which 900 ETH has entered a mixer, while the remaining ETH is still held in the hacker's address.It is reported that "Mining Little Penguin" experienced the private key theft incident on January 14, 2023, with the stolen assets valued at approximately 7.9 million dollars.

ChainCatcher message, DEXX founder Roy posted on social media that a third-party independent security company will publicly disclose all hacker addresses within a few hours and asks everyone to help monitor for any unusual activity and to contact each platform for blocking and interception as soon as possible. The statistics on all affected addresses and amounts have basically been completed.A compensation channel will be opened within the DEXX platform. Currently, the DEXX security upgrade has not been completed, so please do not deposit any funds into DEXX (today, there are still users whose deposited funds were stolen by hacker scripts that have not yet been shut down), and it may also not be possible to return assets through the original route (because the hacker has control of the private keys). The product will be upgraded with a brand new compensation address for refunding funds, and more details regarding law enforcement, institutional investment and endorsement, and compensation plans will be announced soon.

ChainCatcher news, Beosin Alert posted on platform X, currently has collected about 2800 DEXX victim addresses, with over 9000 stolen transactions. An analysis of some stolen addresses' funds revealed that the stolen funds are still held in the hacker's address and have not been transferred out. It is likely the work of the same hacker, who is speculated to transfer funds based on the victims' token balances and arranged them in descending order of value.

ChainCatcher message, Slow Mist stated on platform X that, according to data submitted by community users, the losses from the DEXX hacking incident have reached millions of dollars, and these funds are currently scattered across multiple different hacker addresses.

ChainCatcher news, according to PeckShield monitoring, the address marked as the BingX hacker has shown unusual activity.

ChainCatcher message, the address marked as the WazirX hacker has transferred the tenth batch of 5,000 ETH (approximately 12 million USD) to a new intermediary address 0xdBdE...8C56, and has laundered 4,900 ETH through Tornado Cash. As of now, the related address has laundered a total of 52,500 ETH (approximately 139 million USD) through Tornado Cash.

ChainCatcher news, according to PeckShield monitoring, the WazirX hacker address has transferred 2600.1 ETH (worth about 6.5 million USD) to Tornado Cash in the past 9 hours.

ChainCatcher message, PeckShield monitoring shows that a hacker address related to the cryptocurrency exchange Rain has transferred 721 ETH (approximately 1.7 million USD) to Tornado Cash.

ChainCatcher news, according to PeckShieldAlert monitoring, the wallet address marked as the Rain exchange hacker has begun to launder ETH through Tornado Cash.

ChainCatcher news, according to @ai_9684xtpa's monitoring, the hacker address transferred all remaining 36 trillion SHIB to the shipping address 0x35fe...745CA two minutes ago, worth up to 63.32 million dollars. This portion of tokens may be sold off entirely in the next few hours, please pay attention to the price fluctuations. So far, 54.3 trillion SHIB (nearly 100 million dollars) has been completely transferred.

ChainCatcher news, according to on-chain analyst @ai_9684xtpa's monitoring, in the past two hours, the WazirX hacker address has transferred 80.1 billion SHIB (14.74% of the stolen SHIB amount) to address 0x35fe..745CA, worth up to 14.02 million USD, and is continuing to sell in batches.Currently, the hacker address still holds 49 trillion SHIB, with a total value of 86.52 million USD; due to large on-chain sell-offs and panic sentiment, the price of SHIB has dropped by 9%, currently priced at 0.00001726 USD.

ChainCatcher message, according to PeckShieldAlert, the address marked as the DMMBitcoin hacker has transferred 500 BTC (worth approximately 31.5 million USD) to a new address bc1qrf...jl9c.

ChainCatcher news, according to monitoring by Shield, the hacker address of the crypto quant company Kronos Research transferred 1000 ETH (approximately 2.9 million USD) to Tornado Cash.

ChainCatcher news, according to the monitoring by Shield, the hacker address of Kronos Research has transferred approximately 1000 ETH (about 3 million USD) to Tornado Cash again.

ChainCatcher news, according to monitoring by Shield, the hacker address of the crypto quant company Kronos Research transferred 1000 ETH (approximately 3.07 million USD) to Tornado Cash.

ChainCatcher message, according to PeckShieldAlert monitoring, the address marked as the ZBExchange hacker has transferred 1,313 ETH (approximately 3.2 million USD) to Tornado Cash in the past 2 days.

According to ChainCatcher news, monitoring by Beosin's Beosin EagleEye security risk monitoring, early warning, and blocking platform shows that Galxe is suspected to have suffered a DNS hijacking attack, resulting in a large amount of user funds being stolen. The currently reported stolen funds involve multiple cryptocurrencies, primarily sent to the address 0x4103baBcFA68E97b4a29fa0b3C94D66afCF6163d, which has collected over $70,000 in virtual currency. Almost all of the funds were eventually converted to ETH and sent to the address 0x1c0e96Ef2A82b573B826B4138DF9c126AA4d1825, while some funds were sent to the address 0x412f10AAd96fD78da6736387e2C84931Ac20313f, and part of the funds entered FixedFloat. The image shows the fund statistics for the address 0x4103baBcFA68E97b4a29fa0b3C94D66afCF6163d.

ChainCatcher message, X-explore tweeted that some malicious browser extensions have replaced part of the users' deposit and withdrawal addresses on centralized exchanges (CEX) with hacker addresses. Since June 2022, there have been hundreds of attacks on Binance, Stake.com, Bitso, and more than 10 other CEXs, with 142 attacks on Ripple resulting in a loss of 14,361 XRP. (source link)

ChainCatcher news, according to OKLink data, the total amount of on-chain assets involved in the BitKeep wallet theft incident reached 31 million USD, involving 4 chains: BSC, ETH, TRX, and Polygon, with a total of 50 hacker addresses. The reason for this large-scale theft is that hackers hijacked the latest installation package 7.2.9.Earlier, ChainCatcher reported that the SlowMist security team tweeted that they are conducting an in-depth investigation into the BitKeep wallet and have frozen some of the funds transferred by the hackers. (source link)