Incident case file

Solana Genesis Whale — Suspected Key Compromise & Cross-Chain Bridge

Incident date July 10, 2026

1 views

ActiveSolana → EthereumSuspected Key CompromiseCluster: SOLGENESIS-KEYCOMP-2026-07

Estimated loss

$14.2M

Victims identified

Victim group joining is coming soon.

Investigation

75%

Facts and investigation

Attacker: Theft/relay addresses (Solana): Ffd1oB2aYM5UzMYUM7TmxULDRQb6KzgrBwmgj9U1C2bE and 653pnn5fzF51FfotBwxua55Es4QXxTdaXJLbPczVmswp.

Funds moved to: Post-bridge destination addresses (Ethereum): 0xaa5cfa4e96dda0f9aa30f4dc948b542a9b5817c6, 0x536b4ee7507c41143e1b0bd1bf3f2b84be404836, 0xbf11bdfbeb9ed137c352c81e45d191cacae6b0cf. Method: irregular unstaking of 180,900 SOL followed by a Solana-to-Ethereum bridge. Exact compromise vector (phishing, private key leak, physical coercion) remains unconfirmed and under investigation.

Victim wallet: HwtbQBNnLERakdUDuCCLWmUs2oETLFQZeHUWeQdPads, an address tied to the initial Solana genesis block token distribution. Investigation jointly led by ZachXBT and Specter Investigation, with Specter first spotting the irregular unstaking and bridging activity.

Timeline: July 10, 2026, several hours before public disclosure: irregular unstaking of 180,900 SOL (~$14.2M) is detected from the genesis-era wallet HwtbQBNnLERakdUDuCCLWmUs2oETLFQZeHUWeQdPads, followed by a bridge of the funds from Solana to Ethereum via the addresses Ffd1oB2aYM5UzMYUM7TmxULDRQb6KzgrBwmgj9U1C2bE and 653pnn5fzF51FfotBwxua55Es4QXxTdaXJLbPczVmswp. Funds arrive at three Ethereum addresses: 0xaa5cfa4e96dda0f9aa30f4dc948b542a9b5817c6, 0x536b4ee7507c41143e1b0bd1bf3f2b84be404836, and 0xbf11bdfbeb9ed137c352c81e45d191cacae6b0cf. ZachXBT, working jointly with Specter Investigation (who first flagged the movements), publishes the investigation on July 10, 2026, relayed by @Mvresy and @PANewsCN. The precise cause of the compromise remains formally 'suspected' and under active investigation; no attribution or recovery has been confirmed as of this report.

Sources and coverage

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)