← Radar

Incident case file

Sign in to watch

0xAcme DeFi — pool drain and downstream laundering cluster (full import example)

Incident date 2 August 2024

1 views

Funds moving — mixer + CEX deposit chainEthereumArbitrumSmart contract exploit / liquidity drainCluster: #ETH-ACME-DRN-20240802

Estimated loss

$197M

Victims identified

842
Victim group joining is coming soon.

Investigation

67%

Facts and investigation

Attacker: 0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

Funds moved to: Tornado Cash → bridged to Arbitrum → split across 3 CEX hot wallets (labels redacted)
~120 EOAs observed; dominant pattern: WETH → USDC → bridges; top 5 cluster ties to prior pig-butchering liquidity providers.

Timeline: T0: abnormal MEV bundle drains primary pool. T+12m: attacker consolidates to wallet A. T+6h: first mixer hop. T+48h: CEX deposits begin; on-chain correlation preserved via shared cluster code and timing windows. Public victims coordinated via private Telegram; law enforcement packet in progress.

Sources and coverage

Victim testimonies

Victim #US-914$12,400

Signed what looked like a routine permit; balance was gone within minutes. Team acknowledged the incident on official channels the same day.

Victim #EU-203€9,800 (USDC)

Funds were still on the protocol UI as ‘staked’; Etherscan showed an outbound sweep to an address I never interacted with.

Victim #ASIA-774.2 ETH

Verified losses with support ticket logs; linking case intake for internal cross-check.

+ Add my testimony → (coming soon)