Crypto Theft Campaign Drains 107,000 from EVM Wallets

A coordinated cryptocurrency theft campaign is draining small amounts from hundreds of wallets across multiple Ethereum Virtual Machine-compatible blockchains, resulting in losses exceeding 107,000 as of early Friday, according to blockchain investigator ZachXBT. The attack, which spans networks including Ethereum, BNB Chain, and Base, targets modest balances to evade quick detection, with no confirmed method of compromise identified yet.

ZachXBT first alerted the community via Telegram, describing the operation as ongoing and affecting wallets on various EVM chains. Transaction analysis shows consistent patterns: funds are siphoned in increments under 2,000 per address, funneled to related destinations that suggest a single actor or group. Ethereum has seen the largest share of losses at approximately 54,655, or 51 percent of the total, followed by BNB Chain with 25,545 and Base with 8,688. Smaller networks like Arbitrum, Polygon, and zkSync Era have also reported drains ranging from 691 to 6,273. Investigators have flagged the address 0xAc2e5153170278e24667a580baEa056ad8Bf9bFB as suspicious, noting its receipt of incremental transfers across chains.