A cluster of long-dormant Ethereum wallets tied to a failed 2016 ICO has been swept clean, with 1,003 ETH drained into a single tagged address. The event surfaced on May 1, 2026, with researcher Liam 'Akiba' Wright among those flagging the unusual on-chain activity.
The precise attack vector remains under debate. Theories circulating among researchers and affected users point to three possible causes: compromised old private keys, weak wallet-generation tooling common in early ICO infrastructure, or an undisclosed exposure specific to the project's original contract architecture.
What makes the incident notable is the age of the wallets involved — accounts dormant for nearly a decade suddenly moving in coordinated fashion strongly suggests an attacker with prior knowledge of the keys, rather than a brute-force or opportunistic sweep. The community is still working to identify the tagged destination address and trace the funds.
CryptoSlate