Skip to content
THREATWIRE

DeFi Security · Transaction

Attacker funding

Ethereum · block 26,131,392 · 2026-10-06 05:57:23 UTC

Hash

0xd4c0b18a058e7f0a12855f30174f4cb1e973c15c886063deab97e1a21f048ac6

0xd4c0b1…048ac6txEtherscan ↗

From
0xd04e9f…591796Etherscan ↗
To
0xd90e2f…24f31bEtherscan ↗
Confirmation
Confirmed on-chainRead-only JSON-RPC lookup of the transaction, receipt and blockChecked 2026-10-19 · also named by CertiK

Per CertiK this was a mixer withdrawal funding the attacker. We confirmed the transaction and that the attacker wallet's balance went from zero to about 0.098 ETH in that block; we did not decode the internal transfer.

Incident

MakerDAO flip keeper: an unprotected function handed an attacker control of dormant auction winnings

2026-10-06