Address compromise or exploit resulted in $391k theft of stETH, LINK, and ETH from a single account on August 23.
Security & Exploits ·
On August 23, an account holder reported a loss of approximately $391,000 in digital assets—comprising 149.32 stETH, 1,066 LINK, and 4.06 ETH—drained from their wallet in 31 seconds. The victim, posting an on-chain message, attributed the theft to a compromised account and identified the receiving address as 0x928Ce4a552f0b3152770509F55884A442859dC60.
The victim characterized the stolen funds as personal savings accumulated over a decade by their family, not institutional capital. In the message, they offered a settlement proposal: return 80 percent of the assets to 0x37Fe5783915DDeCCF5fF90CC7382eda2eC4C0a0C while retaining approximately $78,000 as a white-hat bounty, contingent on completion before the attacker's Lido withdrawal finalizes.
The victim stated they had already filed reports with the FBI's Internet Crime Complaint Center, the FTC, and Chainabuse, and flagged the addresses with compliance teams at multiple major exchanges including Binance, Coinbase, Kraken, OKX, Bybit, HTX, and Gate. It remains unclear whether the attacker has responded to the offer or attempted to move the stolen assets.