TLDR
Hundreds of EVM?compatible wallets were drained, and the exact count is still being compiled by investigators (Cointelegraph report).
- Total losses are about $107,000%%CKPROTECTED2%% so far and rising (The Defiant).
- Most victims lost under $2,000%%CKPROTECTED2%% per wallet (Cointelegraph).
- The root cause is unclear, with phishing emails spoofing MetaMask suspected (CryptoSlate).
Deep Dive
1. Count And Coverage
The incident spans multiple EVM networks and is described as affecting hundreds of wallets, with victim lists still being consolidated.
- Investigators report activity across roughly 20 EVM networks with about $107,000%%CKPROTECTED2%% drained so far (The Defiant).
- Loss concentration by network is estimated at 51% Ethereum, 24% BNB Chain, 8% Base, with the remainder on other EVM chains (Finance Magnates).
Treat hundreds as a provisional floor until investigators finish consolidating addresses and updates.
2. Loss Pattern
Attackers targeted many small balances, aggregating theft while avoiding early alarm signals.
- Per?wallet losses typically stayed below $2,000%%CKPROTECTED2%% for victims (Cointelegraph).
- Cumulative losses are about $107,000%%CKPROTECTED2%% and climbing, with frequent small inflows to the receiving address (TradingView summary).
Small amounts across many wallets can be missed; proactive approval reviews and routine monitoring reduce exposure risk.
3. Suspected Vector
A phishing campaign mimicking MetaMask is suspected, though the exploits root cause has not been confirmed.
- Reports cite spoofed MetaMask upgrade emails and recommend revoking suspicious contract approvals and monitoring wallets (Cointelegraph).
- A separate holiday?period breach of the Trust Wallet Chrome extension affected 2,520 wallets and about $8.5 million, providing context on recent wallet?level risks but not necessarily the same vector (CryptoPotato).
If you interacted with upgrade emails or browser extensions recently, exercise extra caution and validate permissions before signing.
Conclusion
The precise number of drained EVM wallets is not fixed yet, but current evidence points to hundreds of affected wallets, low per?wallet losses, and an unclear vector. The count and theft total are likely to evolve as investigators aggregate addresses. Monitor official updates and take standard precautions around approvals and unsolicited communications.
