Multiple wallets drained on Arbitrum by thief at 0xDA7E0fE37a8CBe4998bCd9D1F6eeEf2090BD93a3; victim suspects compromised seed phrase from Discord/Telegram bot or malicious app.
Security & Exploits ·
On October 21, 2026, a wallet drained 1749.81 USDC.e on Arbitrum to address 0xDA7E0fE37a8CBe4998bCd9D1F6eeEf2090BD93a3. The affected party reports that the same address compromised at least 5 wallets in total on that date, and has initiated contact with other victims through on-chain messaging to investigate the breach pattern.
The victim suspects the seed phrase was compromised through exposure via a Discord or Telegram bot, or possibly a malicious application, though no definitive vector has been identified. The coordinated timing of the drains across multiple wallets and the targeting of the same receiving address suggest a single attacker may have gained access to multiple seed phrases through a common source.
Whether the compromise originated from a third-party service, social engineering, or another method remains unclear. The victim indicated plans to file a police report and solicited information from affected parties through Blockscans's chat feature to determine the attack method, but no additional technical details about the breach mechanism have surfaced.