145 wallets emptied and $4.3 million gone; nobody knows whose they were
The suspected key leak ran across EVM chains, Tron and bitcoin, and the attacker had not finished when the report was filed.
Specter, watching the chain, flagged an unknown holder’s private key as likely stolen.[1] More than $4.3 million left wallets on EVM chains, Tron and bitcoin.[1]
The attacker emptied more than 145 Ethereum addresses, most holding a dollar token.[2] The funds were swapped into ether and moved across chains.[3] That cash was added to bitcoin from at least five other addresses.[3]
Each wallet had one lock, held by one person, and that was the whole defence.[2]
The drain was still running when the report was filed.[4] The report lists $4.3 million stolen and the theft ongoing, in the same line.[4]
Who gains, who loses
Receipts
On September 22, 2026, Specter monitoring indicated that an unknown victim’s private key was likely compromised, causing losses exceeding $4.3 million across EVM-compatible chains, Tron, and Bitcoin.
“According to Jinsecai, on September 22, Specter monitoring revealed that the private key of an unknown victim appears to have been compromised, causing losses exceeding $4.3 million across EVM chains, Tron, and Bitcoin.”
The attacker emptied more than 145 Ethereum addresses.
“The attacker has now emptied over 145 Ethereum addresses, most of which held USDC; the funds were converted to ETH and cross-chain transferred, then consolidated with Bitcoin stolen from at least five other addresses.”
The BingX report said the stolen funds were largely swapped into ETH, moved cross-chain, and consolidated with BTC taken from multiple addresses.
“Funds were largely swapped into ETH, moved cross-chain, and consolidated alongside BTC taken from multiple addresses.”
The total amount stolen could continue to increase because the attacker was still transferring wallet assets.
“Specter noted that the attacker is still actively transferring assets from the compromised wallets, and the final stolen amount may continue to rise.”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.