5543 ETH | $6,561,193.67

… or $7,064,941.51 at the time of writing.

The number increases as the price of Ether climbs, likely due to the seasonal market shift, widely expected post-Thanksgiving in the US, and entering this holiday season. (Images at the end).

The victim, 0x8975dB, a long-time Ethereum bull and Compound Finance lending participant has been made to watch, helpless, as their Ether is withdrawn from the protocol (TX#0xbdd8720…), swapped on Uniswap (TX#0x89274ac…), and ultimately transferred to the thief (TX#0xf2cb26c…, → thief: 0x0bB298), thus halting a long run invested in the $COMP/$ETH ecosystem and thereby sacrificing even more potential value (as otherwise would be rewarded by the protocol), now lost in the illicit trades.

There is still hope (!!) but we need your help!

The funds lie dormant at the first hop from their rightful owner: yet untouched by any threat actor, for a seemingly abnormal amount of time. This is a very fortunate amount of time for investigative work, which has been well-underway behind the scenes.

However, of greater concern is the fact that the address holding the stolen Ether is totally without a label [at time of writing]. Unsuspecting, any major exchange might unwittingly offer an exit ramp for the ETH and permit a cash out to fiat - game over.

ADDRESS OF THE THIEF HERE!:

🚨 Please report + flag this address on Etherscan! 🚨0x0bB298be4c2656391D961BbE3248DDFc6e77746d

Note: Always research for yourself, I would never ask you to forgo this! I am especially certain after doing my own investigation and I include portions of this proof below for you to review diligently. Once you have made up your mind - you know what to do!

@SFSyndicate was helpful about this and wrote a report on @Chainabuse, found here:

https://chainabuse.com/report/e37c1bcc-d1be-4761-824b-d4da8889c76b

A view of the stolen funds on a brand new address, with no other transactional activity before the theft. The compromised wallet has been active all the way back to 2016, and can be seen pleading with the attacker on-chain below.

The transaction of most significant value: 0xf2cb26c7012748e4564def52586a75de9881d5ba9ef2d89921f5ffc26728098d

TX Hash: 0xb95d4ccfc46c2e56331d1cddd83ee398d575fb8e87f6ff6d6e14cd8868679278

Using the link below you may sign up for the waitlist to use Arkham Intelligence - blockchain explorer & investigations platform, as seen featured here. You will be bumped to the top of the waitlist using my link:

https://platform.arkhamintelligence.com/waitlist?referrer=YWRhbUBlbHhyLmRpZ2l0YWw=

I am always looking for more tools too, so feel free to advocate for your favorite some time in conversation 🖤 🧙‍♂️

Thanks for making Web3 a safer place with me 🙂

… or at least I hope so 👀

- Alchemyst

… PS. USE A PASSWORD MANAGER AND DON’T RE-USE PASSWORDS!! For more tips, check out my Twitter; use @Wallet_Guard + @RevokeCash https://revoke.cash (weekly!) and (in no specific order, just off the top of my head!) follow folks like @Plumferno, @1c4m3by, @officer_cia, @cryptoShields, @zachxbt and DYOR/stay safe!

Alchemyst0x alchemyst.eth elxr.eth
EVM/ETH:0x2020109D633c7426929Aeab0BaFfa7E7046b13d2
XMR:474vpfELTC8hyi3Tkvp8n7N3vXcTwqjMXCwfCivVTN2jMLxQrf3JLS5a1hrv8xcaYS3qQNSd9FWfp9BjQWsADZow5Vg9J3j