Victims of an onchain exploit issue final ultimatum to fund holder demanding return of 726 ETH (85%) by October 26, 2026, with addresses flagged across major blockchain analytics firms and exchanges.
Security & Exploits ·
Victims of an onchain exploit have issued a final ultimatum to a fund holder, demanding the return of 726 ETH (85% of holdings) by October 26, 2026, 12:00 UTC, with an offer to retain 128 ETH (15%) as a bounty. The message, posted onchain from address 0xa1b8944463dc411164f2ee824d89186fec6c9259, follows an initial deadline of October 23 that passed without response from the holder at address 0xf50Ec5668242c332bE99a495D0D0c2bfB3dc21EA.
The victims have flagged the suspect's addresses across multiple blockchain analytics platforms including TRM, Elliptic, Chainalysis, and Crystal, and reported them to major exchanges. Criminal cases have been opened in 5 countries, with proceedings underway in an additional 10. A Safe contract created by the suspect on October 21 was also flagged within an hour of initial transfers. The victims signal they will pursue civil claims and continue police cooperation if funds are not returned by the deadline.
The notice specifies that victims will withdraw the bounty offer and cease negotiations after October 26, 12:00 UTC, escalating enforcement action through exchanges and law enforcement. The victims designate a single Ethereum address and email (humbleferryman@proton.me) as their only legitimate contact points, warning that other addresses or emails claiming to represent them are impostors.