Profanity Wallet Hack Hack

REPORTED LOSS $978K
Low Access Control

What happened

Quick Summary

732 $ETH was stolen from the wallet generated by the Profanity tool. The hacker compromised the private key and transferred funds to Tornado Cash.

Details of the Exploit

Another hack occurred related to Profanity generated addresses. The hacker stole 977,550 $USD worth of assets from the vanity address and transferred them to Tornado Cash. The victim sent a transaction with the message, asking for a return of 50% of the stolen funds.

Block Data Reference

Attacker address:

https://etherscan.io/address/0x9731f44b…0539b9

Transactions to Tornado Cash:

https://explorer.bitquery.io/ethereum/txs/calls?caller=0x9731f44b…0539b9&contract=0xd90e2f92…24f31b

The Transaction with the message:

https://etherscan.io/tx/0xf7e7de7c…52e512

Case & protocol details

Classification Other
Protocol Type Exploit/Access control

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

AFX $24.1M
B² Network $3.8M
Third-party SquidRouterModule $3.2M
StablR $12.8M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes