Crypto News
Hundreds of Ethereum mainnet wallets, several dormant for over seven years, were drained on May 1 in a coordinated move that funneled assets to a single address, according to BSCN, citing Coin Bureau. Security researchers say transaction patterns point to a single attacker exploiting what may be a previously unknown vulnerability, with activity reportedly still ongoing. The breach lands while ETH trades around $2,300, below its SMA 5 at $2,308, SMA 10 at $2,320, and SMA 21 at $2,312.
Why it matters
An exploit of this shape — many wallets, single drainer, dormant addresses included — reads less like targeted phishing and more like a systemic key or signing weakness. Dormant wallets haven't interacted with the latest dapps, so a shared vulnerability likely lives below the application layer. Until the root cause is identified, every Ethereum mainnet holder with legacy wallet setups is implicitly exposed, and the security premium the network has commanded over alt-L1s narrows in real time.
The technical backdrop is already weak. ETH is trading below all four short-term moving averages, and the 200-day at $2,755 is flashing a sell signal. The only support comes from the SMA 50 and SMA 100, which sit beneath price. Funding rates are negative even as long positions dominate, which means conviction behind the long side is thinning — a fragile setup before the exploit news even landed.
Market impact
The level to watch is $2,200. A hold there keeps the path open to a retest of $2,400 and, on a broader consolidation, a recovery toward the $2,700 zone. A break below accelerates rotation away from ETH and into infrastructure plays the market deems more secure. With the vulnerability still unpatched and flows still being tracked, the next 24-48 hours of wallet activity will likely set the tone for ETH's direction into the rest of the week.
Frequently asked questions
-
What happened to the Ethereum wallets on May 1?
Hundreds of Ethereum mainnet wallets — several dormant for over seven years — were drained in a coordinated move that funneled assets to a single address, according to BSCN citing Coin Bureau. Security researchers say the transaction pattern points to a single attacker exploiting what may be a previously unknown…
-
Is the Ethereum exploit still ongoing?
As of the report, security researchers were actively tracking the drainer address and fund flows, with activity reportedly still ongoing. The full scope of the damage had not yet been confirmed at the time of publication.
-
What vulnerability is suspected in the Ethereum wallet drain?
The seed does not identify a specific vulnerability. The pattern — many wallets, one drainer, dormant addresses included — is consistent with a systemic key, signing, or wallet-software weakness rather than targeted phishing.
-
Where is ETH price trading relative to its moving averages?
ETH is trading around $2,300, below its SMA 5 at $2,308, SMA 10 at $2,320, and SMA 21 at $2,312. The 200-day at $2,755 is flashing a sell signal; the SMA 50 and SMA 100 are providing marginal support from below.
-
What ETH price level should traders watch next?
$2,200 is the key support. A hold keeps the path open to a retest of $2,400 and, on broader consolidation, a recovery toward the $2,700 zone. A break below $2,200 would likely accelerate rotation away from ETH.
Crypto Rank News
CoinDesk
Lookonchain
Benjamin Cowen
CryptoSlate
WatcherGuru
Glassnode