EOA Token Theft Hack
What happened
On September 11, 2025, an unknown victim lost $3.047 million USDC on Ethereum through a sophisticated theft. The attacker rapidly converted the stolen funds to ETH and laundered them through Tornado Cash mixer to evade detection.
The attack targeted an unidentified victim's wallet containing 3.047 million USDC through either a smart contract exploit or flash loan attack. The attacker immediately converted the stolen USDC to ETH and deposited the funds into Tornado Cash, a decentralized privacy mixer. The funds were split into multiple smaller transactions and routed through intermediate addresses to complicate tracking efforts by investigators and blockchain analytics firms.
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report binance.com
- report Report ainvest.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.