ZachXBT Ongoing EVM Wallet Drainer Campaign (Active Since Dec 2025)

Timeline: On approximately December 25, 2025, ZachXBT first publicly flagged an ongoing wallet-drainer campaign targeting EVM chain users with a distinctive low-value-per-victim pattern (under $2,000 per wallet to avoid triggering automatic security alerts). The primary attacker cluster identified is 0xAc2e5153170278e24667a580baEa056ad8Bf9bFB. By the initial reporting window (December 2025 - January 2026), cumulative losses had reached approximately $107,000 across hundreds of wallets, with Ethereum representing the largest share (~$54,655). The campaign has continued through 2026 with no publicly identified root cause; security researchers have suggested possible links to the Trust Wallet browser extension contagion (which itself was disclosed December 24, 2025), MetaMask 'mandatory upgrade' phishing emails, or a generic drainer toolkit. The campaign's activity during the May 1-16, 2026 window is not explicitly confirmed in recent public reporting and would benefit from direct on-chain validation against the attacker cluster. This entry is retained as a contextual marker; loss figures should be treated as an initial cumulative estimate rather than a fresh-window measurement.