Finance.Biggo Crypto Whale Loses $25.6 Million in Phishing Attack, Again
Article Content
- •The whale lost $25.6 million in a phishing attack on August 12, 2026.
- •This wallet was previously compromised in September 2023, losing $24.2 million.
- •No funds have been returned from the latest attack, unlike the previous incident.
A cryptocurrency whale has suffered a second phishing attack, losing $25.6 million from a wallet previously drained of $24.2 million in September 2023. The latest attack occurred on August 12, 2026, with the hacker converting stolen assets into Dai (DAI) and Ethereum (ETH). The largest single loss was $6.3 million in aWBTC, along with $5.1 million in DAI and $4.7 million in Wrapped Bitcoin (WBTC). The attacker consolidated the stolen funds into four new wallet addresses. Unlike the previous incident, no funds have been returned to the victim this time. The total losses from both breaches now exceed $50 million. The incident comes amid a surge in crypto-related security breaches, with 13 recorded incidents in August alone, totaling over $12 million in losses. The previous attack involved malicious token approvals, allowing the attacker to drain the wallet without the victim's consent.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Coinsbuy in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…