WAX Multi-Chain Bridge: about $91K exploit on Ethereum, Solana, wax
. Reported by public sources (confirmed by DeFiLlama). Amounts are as reported; the trace below shows what the chain says.
On 2026-10-22, DeFiLlama reported an exploit of the WAX Multi-Chain Bridge involving about $90,500. The address 0x01664e…5070 on Ethereum was named by a WAX bridge exploit analysis as the exploiter's address, and the trace shows $75,837 moved out of it, split across four wallets. Of that, $38,116 was deposited to HitBTC, $21,543 was swapped on KyberSwap, $9,102 on MainnetSettler, and $7,076 on ParaSwap, leaving $0 in traced wallets. A freeze of the HitBTC deposit may be possible, and the incident is being watched as KT-7 on Kadena.
Amount: about $91K (reported). Networks: Ethereum, Solana, wax.
What is known
- Reported
- By DeFiLlama.
- Confirmed
- Confirmed by DeFiLlama. The amount is as reported.
- Recorded on Kadena
- As KT-7: each move of the funds is written to a public contract.
- Attacker address
- 1 address attributed by the reports.
- Exchange deposits
- $38K reached HitBTC (so far). A deposit is not a freeze: the exchange decides.
- Frozen
- No freeze read on chain.
- Returned
- No return of funds recorded here.
- Trace coverage
- The coverage of this trace was not recorded (traced before Oct 31, 2026); totals are lower bounds until the next refresh.
Addresses attributed to the attacker
- 0x01664e…dc5070 on Ethereum
Where the funds went
From the trace so far: $38K deposited to HitBTC. A deposit at an exchange is not a freeze or a recovery.
$38K followed across 6 addresses so far from 0x01664e…dc5070.
Recorded on Kadena as KT-7: every move of the funds is written to a public contract.
Sources
Timeline
- Registered on Kadena as KT-7: every move of the funds is now watched and recorded, and anyone can add updates
- $38,116 deposited to HitBTC (a freeze is possible) transaction
- $7,076 swapped on ParaSwap (2 swaps) transaction
- $9,102 swapped on MainnetSettler transaction
- $21,543 swapped on KyberSwap transaction
- $38,116 moved out of the address transaction
- Detected from DeFiLlama: about $90,500 link
Read: Stolen crypto sent to an exchange: deposits, freezes and how to ask.
Facts about addresses and transactions, never about people. Trace a wallet · Check an address · All live incidents