TLDR
Two incidents touched Ethereum (ETH) this week: a reported Truebit exploit of about 8,535 ETH (~$26.4M) per a media alert on X, and an ongoing EVM wallet?drain campaign with ~$107K stolen in small hits per wallet.
- Truebit was reportedly exploited for 8,535 ETH (~$26.4M), per a media alert on X. See the report.
- An active wallet?drain campaign across Ethereum and other EVM chains stole ~$107K in small amounts. See the alert.
- Funds from a prior Upbit hack moved through Tornado Cash this week, including 1,400 ETH per a tracker update.
Deep Dive
1. Truebit Exploit
The most material event was a reported exploit of Truebit, with loss cited at 8,535 ETH (~$26.4M).
- Multiple X posts flagged the incident, including a media alert referencing the 8,535 ETH figure and linking to the protocols handle for context. See the media alert.
- Additional community posts echo the amount and share an alleged attacker address, suggesting a concentrated drain rather than scattered small thefts. See the community note.
If you interacted with Truebit, watch for an official postmortem and consider revoking approvals or pausing activity until a clear fix is published.
2. EVM Wallet?Drain Campaign
Separately, everyday users across Ethereum and other EVM chains faced an active wallet?drain campaign focusing on small per?wallet thefts.
- An alert noted over $107K stolen so far, targeting regular users rather than protocols. See the alert.
- Another report highlighted hundreds of wallets hit with sub?$2,000 drains, reinforcing the pattern of many small losses. See the report.
This is a hygiene and approval risk. Review wallet permissions, avoid signing unknown prompts, and consider using a hardware wallet or separate hot wallet for daily use.
3. Upbit Hacker Funds Movement
While not a new exploit on Ethereum, prior?hack funds moved on ETH this week.
- A tracker reported the Upbit hack address actively sending funds to Tornado Cash, including 1,400 ETH recently. See the tracker update.
Movement through mixers can increase on?chain obfuscation. It does not add direct user risk alone, but it signals laundering activity intersecting the Ethereum network.
Conclusion
This weeks Ethereum?linked security activity centered on a reported Truebit exploit and a broad, low?value wallet?drain campaign, with older hack funds moving on ETH. Focus on practical defenses: limit approvals, verify contract interactions, and wait for official incident notes before re?engaging affected protocols.
