Skip to content
Archive

Post

Back to deliverables

Z CryptoZhaoX
ZHAO
@CryptoZhaoX

钱包放hype里的145,965u盗走了,完全不知道什么原因。。这钱包已经几年没导入过任何地方了 我的钱包 0x66666f3364cf650699299f08e37b5d5cedae6d29 黑客转入钱包 arbiscan.io/address/0x1eb48891… arbiscan链的盗转哈希 arbiscan.io/tx/0xb611485b646d1… @evilcos @SlowMist_Team @HyperliquidX @binance @chameleon_jeff 🚨 URGENT: 145,965.658533 USDC was stolen following an unauthorized withdrawal from my Hyperliquid account on Arbitrum. I did not authorize the withdrawal or the subsequent transfer. I urgently need help tracing and freezing the funds before they move. 🧵 1/5 On July 20, 2026: 07:35:09 UTC — 145,965.658038 USDC reached my wallet via CCTP. 07:35:21 UTC — 145,965.658533 USDC was transferred to the attacker. Only 12 seconds apart. My seed/private key has not been imported into any new app or device for years. 2/5 Victim: 0x66666f3364cf650699299f08e37b5d5cedae6d29 Attacker: 0x1eb488919fcf5e6f658725370e2f635c3fc47f73 CCTP arrival: arbiscan.io/tx/0x4493c1527cfa3… Unauthorized transfer: arbiscan.io/tx/0xb611485b646d1… 3/5 @HyperliquidX @HyperFND: Please urgently preserve the withdrawal request, source IP, device/session information, API or agent-wallet records, signatures and all relevant access logs. Please help determine how my Hyperliquid account and wallet signing authority were compromised. I can prove wallet ownership privately. 4/5 @circle @SlowMist_Team @evilcos @_SEAL_Org @zachxbt @BinanceHelpDesk: The attacker currently still holds the full 145,965.658533 USDC and has made no outgoing transaction. Please flag and trace the address and help coordinate an emergency freeze before the funds move. I can provide a police report and proof of ownership. 5/5

· 2.3K Views

2 Reposts 6 Quotes 14 Likes 1 Bookmarks
replies reposts likes
7 replies collected of 13 X reports
ZHAO @CryptoZhaoX ·

Security and tracing assistance urgently needed: @_SEAL_Org @SlowMist_Team @MistTrack_io @evilcos @zachxbt The unauthorized Hyperliquid withdrawal reached my wallet at 07:35:09 UTC. Only 12 seconds later, the full 145,965.658533 USDC was transferred to the attacker. I can provide wallet ownership proof and police documentation privately.

1
云中鹤 @YZH168 ·

@CryptoZhaoX @evilcos @SlowMist_Team @HyperliquidX @binance Let ARB freeze it for you.

original · zh

@CryptoZhaoX @evilcos @SlowMist_Team @HyperliquidX @binance 让arb帮你冻结啊

ZHAO @CryptoZhaoX ·

@evilcos @SlowMist_Team @HyperliquidX @binance URGENT: 145,965.658533 native USDC was stolen from my wallet on Arbitrum without authorization. Victim: 0x66666f3364cf650699299f08e37b5d5cedae6d29 @arbitrum @offchain @_SEAL_Org Please escalate this to the appropriate security/incident-response teams. 1/3

3 2
小白 @crypto_xiaobai_ ·

@CryptoZhaoX @evilcos @SlowMist_Team @HyperliquidX @binance This is a private key leak. You should check the relevant wallet.

original · zh

@CryptoZhaoX @evilcos @SlowMist_Team @HyperliquidX @binance 你这是私钥泄漏,你应该去找相关钱包排查

GoPlus中文社区 @GoPlusZH ·

@CryptoZhaoX @evilcos @SlowMist_Team @HyperliquidX @binance The money from Hyperliquid was withdrawn onto the blockchain and then transferred out, and it wasn't just one chain where funds were transferred; it's a private key/mnemonic phrase leak issue! The stolen funds haven't been moved yet, so it's recommended to prioritize monitoring the address that caused the theft. GoPlus has also blacklisted the attacking address. There are too many possibilities for the leak; for reference: x.com/GoPlusZH/status/20793997…

original · zh

@CryptoZhaoX @evilcos @SlowMist_Team @HyperliquidX @binance Hyperliquid的钱提到链上之后转走,还不只一条链的资金被转,还是私钥/助记词泄露的问题!被盗资金转走后倒是还没转移,建议优先监控盗币地址。 GoPlus也对攻击地址做了拉黑处理,具体泄露原因的可能性太多了,供参考: https://x.com/GoPlusZH/status/2079399787070378118/photo/1

1
Katrine Diane @diane_katr92539 ·

@CryptoZhaoX When did this happen?

Filipe 🔶 @filipebinance ·

@CryptoZhaoX @evilcos @SlowMist_Team @HyperliquidX @binance Hey Zhao! I checked the addresses using the provided TxIDs and can confirm that none of them belong to Binance or any of our users. Unfortunately, there is nothing we can do to help in this case. I hope the issue can be resolved and that you are able to recover your funds.

1

2 replies whose parent comment X withheld

ZHAO @CryptoZhaoX ·

@evilcos @SlowMist_Team @HyperliquidX @binance @arbitrum @_SEAL_Org Please help monitor and trace the recipient, preserve relevant records, share the official law-enforcement channel, and alert exchanges/bridges if funds move. A police report is being filed in China. @circle @ArbitrumDevs @HyperliquidX @SlowMist_Team @MistTrack_io 3/3

2 2

These were collected in full; the comment they answer was not returned by X.