Exploit analyst traces stolen EP tokens ($1,048 USDT equivalent) withdrawn via valid signature, swapped through PancakeRouter, and moved to Baltex with likely conversion to untraceable XMR.
Security & Exploits ·
An onchain analyst has traced the movement of 612,506 EP tokens (valued at approximately 1,048 USDT) through a series of transactions that began with a withdrawal using a valid signature from a vault. The tokens were swapped through PancakeRouter into USDT and then transferred to address 0x6a0af4d678F6282325dB75209c70C5bE93CbCFa4, before the entire USDT balance was moved into Baltex, a decentralized exchange.
The analyst notes that Baltex's USDT trading pairs are limited to USDT-BTC and USDT-XMR. If the attacker converted the funds to Bitcoin, on-chain tracing remains possible using timing and behavioral analysis. However, if a conversion to Monero (XMR) occurred, recovery becomes substantially more difficult due to XMR's privacy properties.
The status of the funds remains uncertain pending confirmation of which trading pair was used on Baltex. The analyst emphasized the withdrawal used legitimate cryptographic authorization, distinguishing this from the characterization offered in earlier statements about the incident.