MyEtherWallet Hack

REPORTED LOSS $150K
Low Access Control

What happened

Hackers diverted visitors of MyEtherWallet.com, accessing user accounts and stealing approximately 215 ether.

MyEtherWallet warned users on Reddit and Twitter as soon as the hack was identified. But, this left a couple of hours where users of the wallet attempting to visit the MyEtherWallet.com website were redirected to a “spoof” or phishing site controlled by the hackers.

The hack employed the “decade-old” technique of redirecting Domain Name Servers (DNS) rather than a hack, or weakness in, MyEtherWallet.

It was quickly identified that over 150k worth of ETH had been stolen in the DNS hack with 179 transactions totaling 216.06 ETH sent to:

https://etherscan.io/address/0x1d50588c…120d29

Case & protocol details

Classification Other
Protocol Type Exploit/Access control
Official Website www.myetherwallet.com/
Protocol Twitter/X @myetherwallet

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

AFX $24.1M
B² Network $3.8M
Third-party SquidRouterModule $3.2M
StablR $12.8M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes