An unknown cryptocurrency holder has lost more than $4.3 million after an apparent private key compromise exposed funds across several blockchain networks. The attack affected Ethereum and other EVM chains, Tron, and Bitcoin, while the attacker continued moving funds as of Sept. 22.
The incident highlights the risks of private key security as attackers increasingly target wallet access rather than exploiting smart-contract code. Recent industry research has identified compromised private keys and wallet infrastructure as a major source of cryptocurrency theft.
More Than 145 Ethereum Addresses Drained
On-chain analyst Specter identified activity involving more than 145 Ethereum addresses. Many of the affected wallets held USDC, which the attacker converted into ETH before moving the assets across chains.
The attacker then consolidated those proceeds with Bitcoin taken from at least five additional addresses. This cross-chain movement makes the theft harder to track through a single blockchain.
The reported losses include:
- More than $4.3 million in cryptocurrency
- Over 145 Ethereum addresses affected
- USDC among the assets held by many targeted wallets
- Bitcoin stolen from at least five addresses
- Funds converted to ETH and moved across networks
The attacker remains active, meaning the reported loss could increase as additional transactions occur.
Private Key Security Under Scrutiny
The incident also underscores the consequences of losing control of a private key. Unlike many smart-contract exploits, a compromised key can allow an attacker to authorize transactions directly from a wallet.
Industry data shows that infrastructure attacks, including private key and seed phrase compromises, accounted for a large share of cryptocurrency theft losses in 2025. That trend has increased attention on wallet security, access controls, and custody practices.
For affected users, investigators will likely continue tracing the stolen assets across chains and monitoring destinations where the attacker consolidates funds. The final value of the theft may remain uncertain until the activity stops and investigators complete their on-chain analysis.
