# A real hack happened in a 0xDeadList address!

By [0xDeadList](https://paragraph.com/@0xdeadlist) · 2022-10-23

---

TLDR: When 0xDeadList Dev team transfers some Matic to a leaked address. A hack happened after a while.

The hack:

[https://polygonscan.com/tx/0x8539ba8f0d5a55273108432578f77b92a66a22dbeb80032940d33c08926e86bd](https://polygonscan.com/tx/0x8539ba8f0d5a55273108432578f77b92a66a22dbeb80032940d33c08926e86bd)

To test the dark forest of Ethereum, and also to encourage hackers to report their hacked addresses. We airdrop one of the 0xDeadList addresses in Polygon:

[https://polygonscan.com/address/0x40d0308215956928dc67cfaa76202d0f9694e003](https://polygonscan.com/address/0x40d0308215956928dc67cfaa76202d0f9694e003)

We choose this address for the following reasons:

1.  It has not been buried in the Polygon mainnet before the hack happened.
    
2.  The 0xDeadList Dev team used this account to test the 0xDeadList contract, and the account has been buried during the test. For example, the account has been sent a tombstone SBT (with its private key in the ERC-721 Token ID), see this transaction for more details:
    
    [https://rinkeby.etherscan.io/tx/0x6473db20f9b341745becde9811c331befff1a95bae7427f66929b815b209128e](https://rinkeby.etherscan.io/tx/0x6473db20f9b341745becde9811c331befff1a95bae7427f66929b815b209128e)
    

We think that it’s harder for hackers to find this leaked address, but let’s see what happened before the hack:

1.  The address has been leaked 100 days ago ([buried in Rinkeby](https://rinkeby.etherscan.io/tx/0x6473db20f9b341745becde9811c331befff1a95bae7427f66929b815b209128e)), and first has a balance in Polygon 90 days ago ([5 Matic](https://polygonscan.com/tx/0xd1231abfb9bf0f830a11ea8eab1d96ef3e5d906aabac0f91ca89c191f231c5d5)). Although we have no idea when hackers found this leaked address, the hack never happened until yesterday.
    
2.  We transfer 0.616 ETH to this address ([transaction 1](https://polygonscan.com/tx/0x903ff708fb36b318cd4b36e675487d3926c086ae2ad108d0f11eaca937992a38)) and nothing happened.
    
3.  We swap the 0.616 ETH into 966.905 Matic ([transaction 2](https://polygonscan.com/tx/0x94511baaae8cf86c966ffb404a86693ba647eef7b0b458de2a8c9c721b531f1b)) in block height [34675224](https://polygonscan.com/block/34675224), and after 3 blocks (block height [34675227](https://polygonscan.com/block/34675227)), a hacker has stolen all 970 Matic ([transaction 3](https://polygonscan.com/tx/0x8539ba8f0d5a55273108432578f77b92a66a22dbeb80032940d33c08926e86bd)).
    

Is it interesting? Welcome to find more details about this hack and discuss it with us in our Discord.

[https://discord.gg/WMZdx5hbr2](https://discord.gg/WMZdx5hbr2)

---

*Originally published on [0xDeadList](https://paragraph.com/@0xdeadlist/a-real-hack-happened-in-a-0xdeadlist-address)*