Someone lost ~$1.58M in a suspected private key compromise on Ethereum and Base: about $1.6M hack on Ethereum

. Reported by public sources (a security firm alert with an address). Amounts are as reported; the trace below shows what the chain says.

On 2026-10-26 at 19:39 UTC, a suspected private key compromise on Ethereum and Base was reported to have cost victims about $1.58M, according to @realScamSniffer. @CertiKAlert said multiple Tornado Cash deposits traced to the drain. The Ethereum address 0x933e52…204b was named by @CertiKAlert, and KadenaTrace's automatic trace shows about $1.5M moved out, with $1,707 still held in traced wallets. Between 08:25 and 13:44 UTC on 2026-10-27, ETH was moved through intermediate wallets and into Tornado Cash. Funds remain under watch on KadenaTrace (KT-10), and no recovery or freezing is reported in the sources.

Amount: about $1.6M (reported). Networks: Ethereum.

What is known

Reported
By @realScamSniffer, @CertiKAlert.
Confirmed
A security firm alert with an address. The amount is as reported.
Recorded on Kadena
As KT-10: each move of the funds is written to a public contract.
Attacker address
None attributed by a source yet; 1 named in reports is traced but not called the attacker's.
Exchange deposits
None seen so far.
Frozen
No freeze read on chain.
Returned
No return of funds recorded here.
Trace coverage
The coverage of this trace was not recorded (traced before Oct 31, 2026); totals are lower bounds until the next refresh.

Where the funds went

From the trace so far: at least $2K still held. A deposit at an exchange is not a freeze or a recovery.

$1.5M followed across 24 addresses so far from 0x933e52…19204b.

Recorded on Kadena as KT-10: every move of the funds is written to a public contract.

Sources

  • @realScamSniffer: ⚠️ Someone lost ~$1.58M in a suspected private key compromise on Ethereum and Base.
  • @CertiKAlert: 🚨 We have seen multiple Tornado Cash deposits which trace to who recently drained ~$1.58M from unknown victim(s). CertiK Report Security Dashboard 👇 Stay Vigi
  • @CertiKAlert: 🚨 We have seen multiple Tornado Cash deposits which trace to who recently drained ~$1.58M from unknown victim(s). CertiK Report Security Dashboard 👇 Stay Vigi

Timeline

  1. 0.0499 ETH moved to 0xb21b7c…a58a (hop 3) transaction
  2. 0.027 ETH moved to 0x3f3ee0…207b (hop 3) transaction
  3. 0.0271 ETH moved to 0x58e409…83d2 (hop 2) transaction
  4. 0.0502 ETH moved to 0x7002f5…6d36 (hop 2) transaction
  5. 0.0773 ETH moved to 0xf604ea…2016 (hop 2) transaction
  6. 0.0862 ETH moved to 0x6cfe7f…0553 (hop 2) transaction
  7. 68.745 USDT moved to Tether: USDT Stablecoin (hop 3) transaction
  8. 0.0424 ETH moved to 0xa67ca5…c0ca (hop 3) transaction
  9. 0.0721 ETH moved to 0xd0fcc4…938e (hop 2) transaction
  10. 0.7678 ETH moved to 0x294f1e…bcca (hop 1) transaction
  11. 0.0721 ETH moved to 0x7f623c…38cf (hop 1) transaction
  12. 0.06 ETH moved to Mayan (hop 6) transaction
  13. 0.0519 ETH moved to Mayan (hop 6) transaction
  14. 0.066 ETH moved to Mayan (hop 6) transaction
  15. 0.0439 ETH moved to Mayan (hop 6) transaction
  16. 0.0439 ETH moved to Mayan (hop 6) transaction
  17. 0.0611 ETH moved to 0x0258d6…73a4 (hop 5) transaction
  18. 0.0531 ETH moved to 0xcfba73…4c03 (hop 5) transaction
  19. 0.0672 ETH moved to 0xccee17…01e7 (hop 5) transaction
  20. 0.0439 ETH moved to 0x2c4fda…db23 (hop 5) transaction
  21. 0.0439 ETH moved to 0x2f04f3…d6de (hop 5) transaction
  22. 82.5184 ETH moved to Tornado Cash (hop 5) transaction
  23. 0.1 ETH moved to Tornado Cash (hop 5) transaction
  24. 0.1 ETH moved to Tornado Cash (hop 5) transaction
  25. 1 ETH moved to Tornado Cash (hop 5) transaction

Read: How to trace stolen crypto, hop by hop.

Facts about addresses and transactions, never about people. Trace a wallet · Check an address · All live incidents