Key Points
- Over $107,000 was drained from multiple EVM-compatible crypto wallets through small, repeated thefts.
- Wallet compromises continued rising in 2025 despite an overall drop in monthly hack losses.
Losses exceeding $107,000 were reported across multiple crypto wallets operating on Ethereum Virtual Machine–compatible blockchains, based on findings shared by blockchain investigator ZachXBT.
The activity marks one of the first significant wallet-draining incidents disclosed in early 2026 and underscores persistent security risks for crypto holders.
Wallets Targeted Through Small, Repeated Drains
ZachXBT reported on his Telegram channel that a suspected attacker is targeting numerous wallets by siphoning relatively small amounts, usually below $2,000 per address.
While individual losses remain limited, the cumulative impact has grown steadily. According to a recent update, total losses were estimated at approximately $107,000 and could increase if the activity persists.
The initial access vector used by the attacker has not yet been identified, leaving uncertainty around further exploits. A wallet address believed to be associated with the operation, ending in 8Bf9bFB, has been flagged for monitoring.
Broader Context of Crypto Wallet Security
Crypto thefts remained a notable issue throughout 2025, with blockchain security firm PeckShield reporting around 26 major exploits in December alone. These incidents resulted in roughly $76 million in losses during the month.
Although substantial, December’s losses represented a decline of about 60% compared with November, when reported damages totaled approximately $194.27 million.
Data from Chainalysis indicates that individual wallet compromises accounted for about 20% of the total value stolen across the crypto ecosystem in 2025.
Throughout the year, an estimated 158,000 wallet breaches were recorded, impacting at least 80,000 unique victims. This marked a significant increase from around 54,000 reported wallet compromises in 2022.
During the Christmas period, Trust Wallet disclosed a security breach tied to a specific browser extension version, resulting in losses of about $7 million. The company also began a compensation process for affected users.
In response to user concerns, Trust Wallet’s chief executive stated on January 1 that the browser extension was temporarily removed from the Chrome Web Store due to a platform-side issue during an update, rather than a newly discovered security flaw.
