Suji Yan Hack

Reported loss $4.0M
Phishing

What happened

On February 27, 2025, Suji Yan, founder of Mask Network, lost approximately $4 million in a crypto hack.

The hack was first detected by on-chain security platform Cyvers, which identified suspicious outflows from Suji Yan’s wallet. Approximately $4 million in crypto was stolen, including 113 ETH, 923 WETH, 301 ezETH, 156 weETH, 90 pufET, 48,400 MASK tokens, 50,000 USDT, and 15 swETH. After being stolen, the assets were immediately converted into ETH, then distributed across six wallets, with one address ending in “df7.” Yan suggested the attack might have been an offline exploit, possibly carried out when his phone was left unattended at his birthday celebration, indicating potential physical access or phone compromise.

Currently, SlowMist and ZachXBT are assisting in the investigation, alongside law enforcement. This incident follows a series of high-profile hacks, including the Bybit breach just days earlier, highlighting the increasing sophistication of cyber threats in the crypto space.

Protocol details

Classification Other
Protocol Type Exploit/Phishing
Protocol links @suji_yan

Understand the attack patterns

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.