Skip to content
Wagyu Data Leak Exposes 4,580 Monero Swap Orders and IP Addresses

Wagyu Data Leak Exposes 4,580 Monero Swap Orders and IP Addresses

First seen 2 Nov 2026, 06:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 2, 2026 at 08:17 UTC
  • •Wagyu.xyz confirmed a data leak affecting 4,580 Monero swap orders.
  • •The exposed data includes Bitcoin transaction IDs, Monero addresses, and IP addresses.
  • •No vulnerabilities in Monero's cryptography were found; the issue lies with the swap service.

A data leak from the swap service Wagyu.xyz has exposed 4,580 completed Monero (XMR) swap orders along with customer IP addresses. The leak, confirmed by Wagyu and analyzed by Hudson Rock, includes a total of 38,628 order records and 10,139 unique IP addresses from transactions between July 18 and October 26, 2026. The dataset links Bitcoin deposit transaction IDs with Monero receiving addresses and customer IPs, raising concerns about targeted phishing attacks against affected users. While the Monero blockchain remains secure, the leak highlights vulnerabilities in the order management of the swap service. The breach's provenance has not been independently verified, and Hudson Rock notes that the number of records does not equate to the number of individuals affected due to potential use of shared IP addresses. The incident underscores the risks associated with using non-KYC services for privacy coins.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-26
New version of FCMP++ protocol test network released
The test network for the FCMP++ protocol received an update, coinciding with the data leak period.
Cryptoticker
2026-10-27
WhiteArmor claims involvement in the leak
Ransomware-tracking services indexed claims from WhiteArmor regarding Wagyu.xyz, though no proof of intrusion was provided.
Infostealers
2026-10-29
Hudson Rock reports on data leak
Hudson Rock analyzed the leaked dataset, revealing the extent of the data exposure from Wagyu.xyz.
Cryptoticker

More articles in this cluster (3)

Following this threat?

Track Kraken and Wagyu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 4

Common questions

Who is affected by the Wagyu data leak?
Users who swapped Bitcoin for Monero through Wagyu.xyz between July 18 and October 26, 2026, may be affected.
What type of data was exposed?
The leak includes completed swap orders, Bitcoin transaction IDs, Monero addresses, and customer IP addresses.
Is Monero's blockchain compromised?
No, the leak does not affect Monero's blockchain security; it pertains to data from the swap service's order management.