Silent wallet drainings raise urgent crypto security alarms across EVM networks.

A wave of discreet cryptocurrency thefts is sweeping across EVM-compatible blockchains, with hackers siphoning off small amounts from numerous wallets, resulting in losses exceeding $107,000. As investigations unfold, questions linger about the methods employed and the potential vulnerabilities being exploited.

Coordinated Theft Operation Unveiled

• Losses exceeding $107,000 have been identified through on-chain analysis.
• No specific wallet providers or exploitation vectors have been confirmed by investigators at this time.
• Attackers are diverting small sums of less than $2,000 per wallet, delaying detection and distributing risk widely.

The recent alert highlighted by blockchain investigator ZachXBT points towards a coordinated campaign targeting various EVM-compatible blockchains. This operation has already caused substantial financial losses as perpetrators appear to strategically withdraw small amounts from a vast number of wallets rather than targeting accounts with larger balances.

The majority of these losses remain below $2,000 per affected wallet, allowing the attacks to unfold without drawing immediate attention from victims or monitoring systems.

Emerging Pattern Raises Concerns

The wallets impacted span multiple EVM networks, indicating that the issue is not limited to a single blockchain or ecosystem. Analysts examining transaction data have noted a consistent timeline and similar transfer amounts, suggesting a systematic operation rather than isolated incidents.

Up to now, no specific wallet provider, decentralized application, or smart contract vulnerability has been pinpointed as the entry point for these attacks. Furthermore, there has been no official confirmation linking these breaches to compromised software updates or phishing campaigns.

Despite the lack of a clear exploitation vector, it is evident that the stolen funds are being funneled to related addresses, hinting at a single entity or tightly-knit group being responsible for these thefts. This ambiguity has complicated efforts to control the situation and given users and developers limited immediate options beyond heightened vigilance.

Small Losses Create Broad Risks

While the financial impact on individual users may seem limited, the methodology employed raises larger security concerns. By distributing their thefts across numerous wallets, attackers can postpone detection, diminishing the likelihood of rapid and coordinated responses.

Victims might not notice missing funds for several days or even weeks, if at all. This approach highlights the ongoing risks faced by users in managing their assets across multiple chains, protocols, and permissions, each interaction increasing the potential for compromise—especially within the interconnected EVM ecosystem.

The timing of these incidents has heightened anxiety within the cryptocurrency community, coming on the heels of a series of security breaches in late 2025 that renewed scrutiny over wallet approvals, private key management, and cross-chain activities.

Exploits Continue to Pose a Threat

This episode is part of a broader pattern of ongoing security challenges within the digital asset sector. Data from blockchain security firm PeckShield indicates that approximately 26 major crypto exploits were recorded in December, leading to losses of around $76 million.

Although this total is significantly lower than the $194 million lost in November, it confirms that exploit activity remains a persistent issue. One particularly noteworthy incident involved Trust Wallet, which reported a security flaw tied to a specific version of its browser extension, resulting in losses of about $7 million during the Christmas period.

In response, the company has begun compensating affected users and has implemented updates to strengthen its verification and reimbursement processes. ZachXBT notes that the case surrounding the drained wallets is still unfolding, with funds continuing to be tracked.

No confirmed explanations exist for how the wallets were compromised, and no products or services have been publicly blamed thus far.