WazirX: about $230M hack on Ethereum
. Reported by public sources (confirmed by rekt). Amounts are as reported; the trace below shows what the chain says.
On 2024-07-18 at 06:20 UTC, about $230M was reported drained from WazirX's multisig after a malicious upgrade of its Safe multisig, according to rekt. KadenaTrace's automatic trace of the exploiter address 0x04b21735E93Fa3f8df70e2Da89e6922616891a88 on Ethereum shows $236.4M moved out, with $107.6M swapped on Swap, $56.6M sent into Tornado Cash, and $84.6M still held in traced wallets. Small deposits to Exchange and Binance were also recorded, where a freeze is possible. The incident is registered on Kadena as KT-3 and is being watched, so further movements will be recorded.
Amount: about $230M (reported). Networks: Ethereum.
What is known
- Reported
- By rekt.
- Confirmed
- Confirmed by rekt. The amount is as reported.
- Recorded on Kadena
- As KT-3: each move of the funds is written to a public contract.
- Attacker address
- 1 address attributed by the reports.
- Exchange deposits
- $8K reached Binance (so far). A deposit is not a freeze: the exchange decides.
- Frozen
- No freeze read on chain.
- Returned
- No return of funds recorded here.
- Trace coverage
- The coverage of this trace was not recorded (traced before Oct 31, 2026); totals are lower bounds until the next refresh.
Addresses attributed to the attacker
- 0x04b217…891a88 on Ethereum
Where the funds went
From the trace so far: at least $84.6M still held; $56.6M into Tornado Cash; $8K deposited to Binance. A deposit at an exchange is not a freeze or a recovery.
$236.4M followed across 204 addresses so far from 0x04b217…891a88.
Recorded on Kadena as KT-3: every move of the funds is written to a public contract.
Sources
Timeline
- Registered on Kadena as KT-3: every move of the funds is now watched and recorded, and anyone can add updates
- $84.6M still sitting in traced wallets
- $7,639 deposited to Binance (a freeze is possible) transaction
- $108,920 deposited to Exchange (a freeze is possible) transaction
- $56.6M into Tornado Cash transaction
- $18,299 swapped on Curve transaction
- $4.2M swapped on CoW Swap (125 swaps) transaction
- $3.8M swapped on MetaMask Swaps (59 swaps) transaction
- $1M swapped on KyberSwap (75 swaps) transaction
- $23.1M swapped on Uniswap (627 swaps) transaction
- $6.7M swapped on SushiSwap (551 swaps) transaction
- $9.1M swapped on ParaSwap (52 swaps) transaction
- $107.6M swapped on Swap (534 swaps) transaction
- Split into 5 wallets ($236.4M out) transaction
- Detected from rekt: about $230M link
Read: Stolen crypto sent to an exchange: deposits, freezes and how to ask.
Facts about addresses and transactions, never about people. Trace a wallet · Check an address · All live incidents