Hacker Dumping $234M from WazirX Crypto Exchange
Web3 security company Cyvers and ZachXBT reveal a possible attack of Indian crypto exchange WazirX. Cyvers warned WazirX on X, “Our system has detected multiple suspicious transactions involving your Safe Multisig wallet on the ETH network.”
Over $230 million stolen from WazirX
According to the X post, $234.9 million from the WazirX Safe Multisig wallet was moved to a new address. Tornado Cash, a decentralized mechanism for private transactions, financed each transaction's caller.
Cyvers said the hacker's address started crypto exchanges. Cyvers says, “The suspicious address has swapped PEPE, GALA, and USDT to ETH and continues to swap other digital assets.”
ZachXBT said in a Telegram message in the “Investigations by ZachXBT” channel that the attacker's address still has over $100 million to dump. ZachXBT says, “the Attacker still has $100M+ worth of SHIB and $4.7M+ FLOKI to sell.”
On-chain data shows the attacker possessed $100 million in Shiba Inu, $52 million in ETH, and $11 million in Polygon. The wallet address holds $3.2 million Fantom, $2.3 million Fetch.ai, $4.7 million FLOKI, and $2.8 million Chainlink.
Unlike other hackers who returned assets to exchanges, the WazirX hacker shows no remorse. The hacker made $618K in $SHIB in their first transaction within hours.
Lookonchain data shows the hacker has 5.4T $SHIB, worth over $95M.
The WazirX team halted crypto and INR withdrawals after the security compromise. X post WazirX said the team is “actively investigating the incident.”
WazirX said, “We’re aware that one of our multisig wallets has experienced a security breach. We are investigating the situation. To protect your valuables, INR and crypto withdrawals will be halted. I appreciate your patience. Future updates will be provided.”