Suji Yan Hack

TOTAL LOST $4.0M
Medium Phishing Attacks

What happened

On February 27, 2025, Suji Yan, founder of Mask Network, lost approximately $4 million in a crypto hack.

The hack was first detected by on-chain security platform Cyvers, which identified suspicious outflows from Suji Yan’s wallet. Approximately $4 million in crypto was stolen, including 113 ETH, 923 WETH, 301 ezETH, 156 weETH, 90 pufET, 48,400 MASK tokens, 50,000 USDT, and 15 swETH. After being stolen, the assets were immediately converted into ETH, then distributed across six wallets, with one address ending in “df7.” Yan suggested the attack might have been an offline exploit, possibly carried out when his phone was left unattended at his birthday celebration, indicating potential physical access or phone compromise.

Currently, SlowMist and ZachXBT are assisting in the investigation, alongside law enforcement. This incident follows a series of high-profile hacks, including the Bybit breach just days earlier, highlighting the increasing sophistication of cyber threats in the crypto space.

Case & protocol details

Classification Other
Protocol Type Exploit/Phishing
Protocol Twitter/X @suji_yan

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.