Hackers drain hundreds crypto wallets: Accounts under $2,000 targeted

Traders Union
All News
Crypto
Hackers draining hundreds crypto wallets across EVM networks, focusing on accounts holding up to $2,000

Highlights

Hackers are carrying out mass attacks on crypto wallets with small balances, deliberately targeting accounts holding under $2,000.
Total losses have already surpassed $107,000 and continue to grow, while the source of the vulnerability remains unknown.
The attacks are undermining confidence in self-custodied crypto storage and putting pressure on user activity across the dApp and DeFi ecosystem.

Unlike traditional hacks that typically focus on wallets holding large sums, this campaign is reportedly aimed at accounts with relatively small balances — most often under $2,000. This approach allows attackers to stay under the radar: individual losses appear manageable, and some victims may not react immediately, especially if the wallet is rarely used.

However, the mass nature of the attacks offsets the low average take per wallet. Over time, such operations generate significant cumulative damage and create a toxic backdrop for the market: users grow increasingly wary of self-custodied crypto storage, while activity across dApps and the DeFi ecosystem may decline.

More than $107,000 stolen: Investigation ongoing, cause unknown

ZachXBT reports that total user losses have already exceeded $107,000 and continue to rise.

View post on X Loading...

The tweet was deleted by the author.

But we saved everything 🙂.

At the same time, the exact attack vector has yet to be confirmed. It remains unclear whether the exploit involves malicious scripts, phishing, compromised browser extensions, seed phrase leaks, transaction signature manipulation, or a vulnerability in some part of the broader infrastructure.

A key concern is that unresolved attacks often carry significant scaling potential. If the vulnerability turns out to be systemic — for example, affecting widely used browser components, frontends, or supply chains — the number of affected users could increase sharply.

Where losses concentrated: Ethereum, BNB Chain, and Base

Damage distribution data points to a concentration across three major EVM ecosystems. Ethereum accounts for 51% of total losses, followed by BNB Chain at 24% and Base at 8%. The remaining stolen funds are spread across other EVM-compatible networks.

This geographic spread suggests the issue is not limited to a single chain. Instead, attackers appear to be operating where user density, liquidity, and recurring wallet–dApp interaction patterns are highest.

Attack wave intensifies as small wallets become easy targets

The wallet drainer segment — schemes in which users are tricked into signing malicious transactions or have their key data compromised — continues to evolve. Tactics are becoming more precise and less visible: instead of headline-grabbing hacks involving millions of dollars, attackers increasingly favor large-scale campaigns targeting wallets with modest balances. This reduces media attention and increases the likelihood that the attack can persist longer.

For users, this represents a shift in the threat model. Even small wallets and secondary addresses can no longer be considered safe simply because they hold limited funds.

Earlier, we reported that 2025 became a record year for crypto thefts and detailed what hackers stole and in what amounts.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.