0xposed logo0xposed
← Radar

Incident case file

Sign in to watch

GoPlus Security Aggregate Report — 2 Private Key Compromises ($238K Combined)

Incident date May 12, 2026

0 views

UnknownEthereumBaseBNB ChainPrivate key compromise (aggregate report)Cluster: GOPLUS-MULTI-2026-05

Estimated loss

$238K

Victims identified

2
Victim group joining is coming soon.

Investigation

25%

Facts and investigation

Attacker: TODO — first victim is Unihax0r (cross-referenced); second victim and attacker unnamed

Funds moved to: TODO — no aggregate laundering trace published
GoPlus Security published an aggregate report on May 12, 2026 stating two private key compromises over a 36-hour window totaling $238,000. The first incident (~$200K) is Unihax0r's drain (see separate radar entry: SIGMA Telegram bot leak). The second incident (~$38K differential) was not named publicly — no chain, victim identity, attacker EOA, or technical details have been disclosed in available sources.

Timeline: On May 12, 2026, GoPlus Security published a consolidated alert flagging two private key compromises within a rolling 36-hour window for a combined ~$238,000 in losses. The first and larger of the two is the Unihax0r incident (~$200K, tracked separately in this radar). The second incident, accounting for the residual ~$38K, was reported only as an aggregate figure: no victim identity, chain, attacker EOA, or technical details have been made public. This entry is retained as an aggregate marker for the GoPlus consolidated bulletin to ensure traceability, but the second sub-incident lacks corroborating detail beyond GoPlus's published total.

Sources and coverage

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)