Leaderboard
29All-time rank
Wintermute logo

Wintermute

Sep 20, 2022

$160M
Lost
$160M
Recovered
$0
Net loss
$160M
Unrecovered0% recovered

On September 20, 2022, Wintermute's $160M DeFi hot wallet was compromised. Attacker brute-forced the private key using a weak 32-bit seed from the Profanity vanity address generator; only DeFi operations were affected.

Target
Other
Classification
Social Engineering
Technique
Phishing
Attribution
North Korea
Chains
Ethereum

Event timeline

  1. Sep 20, 2022
    Exploit executed — $160M drained via phishing
  2. Attributed to North Korea
  3. Recovery status Unrecovered 0%

Data credits

Related incidents