WazirX hacker still holds 150 tokens that have not been further transferred

iChainfo
3 min readJul 19, 2024

--

On July 18, 2024, the Indian exchange WazirX was hacked, with the hacker gaining control of the multi-signature wallet and transferring over $235 million worth of virtual currencies.

The hacker initiated the attack through the address 0x6eedf92fb92dd68a270c3205e96dccc527728066, moving assets from the exchange’s hot wallet at address 0x27fd43babfbe83a81d14665b1a6fb8030a60c9b4 to the hacker’s address at 0x04b21735e93fa3f8df70e2da89e6922616891a88. Subsequently, the hacker converted different virtual currencies to ETH on decentralized exchanges using the addresses 0x90ca792206ed7ee9bc9da0d0df981fc5619f91fd and 0x35febc10112302e0d69f35f42cce85816f8745ca, and transferred them to address 0x361384e2761150170d349924a28d965f0dd3f092.

How the hacker attacked WazirX, by search.ichainfo.com

According to statistics from search.ichainfo.com, there are 200 types of virtual currencies involved in this attack. As of July 19th, 50 of them have been gradually transferred by the hacker and exchanged for ETH on decentralized exchanges.

Tether USD

Pepe

Gala

USDC

DENT

Render Token

OriginToken

Request

Contentos

Alchemy

SHIBA INU

Matic Token

FLOKI

Fantom Token

ChainLink Token

Fetch

Decentraland

SAND

HoloToken

1INCH Token

Uniswap

FTT

LoopringCoin V2

yearn.finance

Graph Token

UniLend Finance Token

Phala

BAT

JasmyCoin

ALICE

UMA Voting Token v1

Arbitrum

Spell Token

Reserve Rights

ApeCoin

Cream

Memecoin

Aave Token

Amp

Curve DAO Token

Immutable X

Beam

ZRX

COTI Token

Bluzelle

chiliZ

Axie Infinity Shard

Ankr Network

Biconomy Token

Quant

Taking Loopring (LRC) as an example, the hacker transferred all 5,640,009 tokens obtained from the exchange to the address 0x90ca792206ed7ee9bc9da0d0df981fc5619f91fd, and subsequently liquidated them all on Uniswap through that address. This action also caused a significant impact on the market.

How hacker dumped LRC, from tradingview

For investors, it is important to monitor the movements of other virtual currencies in the hacker’s address that have not been transferred yet, as they all have the potential to significantly impact the market. Specific tokens include:

Gnosis

Chroma

CelerToken

Ooki Token

Frontier Token

Ethereum Push Notification Service

Cartesi Token

Reef.finance

OMG Network

Republic

Streamr

NKN

Civic

Alien Worlds Trilium

Loom Token

district0x

FunFair

IOSToken

Livepeer Token

Compound

VIB

Threshold Network Token

dYdX

SushiToken

WOO

Illuvium

TokenFi

AlphaToken

Dusk Network

Hifi Finance

Lever

Ethereum Name Service

RLC

SKALE

Storj

Maker

Worldcoin

Audius

QuarkChain Token

Blur

PYR Token

Synthetix Network Token

BandToken

StormX

SuperFarm

YFII.finance

TomoChain

Golem Network Token

SelfKey

Pundi X Token

Dexe

Kyber Network Crystal v2

DODO bird

STPT

Clover

Tellor Tributes

Bounce Token

AdEx

Lido DAO Token

IDEX Token

AVA

Beta Token

NucleusVision

WAXP Token

Omni Network

Orchid

QuickSwap

Ondo

Boba Token

BUSD

Perpetual

Pendle

StatusNetwork

Wrapped MIR Token

Radicle

PIXEL

Flux

Ethena

Mask Network

pNetwork Token

Automata

Origin Dollar Governance

bitsCrunch Token

SuperRare

Alchemix

Numeraire

Dalarnia

Aragon Network Token

Adventure Gold

API3

Paxos Gold

Chickencoin

EASY V2

BarnBridge Governance Token

Highstreet token

Balancer

PlayDapp

Measurable Data Token

Melon Token

PowerLedger

Aavegotchi GHST Token

ComboToken

ether.fi governance token

Bread

League of Kingdoms Arena

Open Custody Protocol

LQTY

Bancor

EnjinCoin

Voyager Token

Yield Guild Games Token

IoTeX Network

The Force Token

FARM Reward Token

Linear Token

Metis Token

Marlin POND

eesee

LayerZero

Mettalex

dego.finance

Big Time

Rupiah Token

Walton

Swipe

OnX.finance

ARPA Token

Mantle

Galxe

PLANET

Pepe 2.0

MultiVAC

XDoge

SAITABIT

Metal

Switch

GreenMetaverseToken

BABYTRUMP

Tokenize Emblem

Dejitaru Tsuka

SPACE ID

Injective Token

Wrapped Pepe

CocosTokenV2

CarryToken

Ocean Token

BOB

Smooth Love Potion

Lisk

ETH

Written by Auguste

--

--

iChainfo

iChainfo is a Web3.0 data infrastructure service provider, aiming to enable users to easily access high-value Web3.0 information.