Skip to content
THREATWIRE

DeFi Security · Transaction

Exploit

Ethereum · block 26,131,471 · 2026-10-06 06:13:11 UTC

Hash

0xbb6940f7c2a1e68cafbae7bb9b94d09af9af06ec3a114f6996f2cab993f3a88c

0xbb6940…f3a88ctxEtherscan ↗

From
0x01eb95…bda5faEtherscan ↗
To
0xec997d…321dcfEtherscan ↗
Confirmation
Confirmed on-chainRead-only JSON-RPC lookup of the transaction, receipt and blockChecked 2026-10-19 · also named by CertiK, repository

Succeeded. 16 events: seven from the Vat, four from the Flipper, one from GemJoin, three from WETH and one from the helper, including a WETH withdrawal of 200 WETH. Attacker balance +200.0 ETH net of gas.

Incident

MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings

2026-10-06