More than 500 long-dormant Ethereum wallets have been emptied, with total losses estimated at around $800K. Over 260 <a class="ticker-mention" href="/en-US/token/eth">ETH</a> — roughly $600K — was routed to an address flagged on Etherscan as Fake_Phishing2831105, which then pushed 324.741 ETH through THORChain Router v4.1.1, likely to obscure the trail.
The attack vector remains unconfirmed. Investigators are weighing several possibilities: exposed old private keys, leaked seed phrases, compromised legacy wallet software, or broader key-management failures specific to wallets that had been inactive for extended periods.
The dormant-wallet angle is notable — attackers may have systematically targeted aged addresses whose owners are less likely to notice or respond quickly. Anyone holding ETH in wallets created with early-generation tools should treat this as a prompt to audit key storage and migrate to modern, hardware-backed setups.
TheBlock
Lookonchain
CoinDesk