Superfortune: The leakage of the attacker's private key rather than address poisoning is not the work of an insider

By: rootdata|2026/05/30 04:45:01
0
Share
copy

Superfortune, incubated by Manta, recently released an update on the X platform regarding a security incident, stating that the attack was not carried out by internal personnel and that no team members were involved. The claim about the team secretly selling tokens is incorrect. The team has also not had any contact with Web3Port.

The investigation confirmed that the attack was not due to address poisoning, but rather a leak of the signer's private key. The attacker independently held the private key and submitted a transaction with a forged address 43 minutes after the correct transaction. The forged address shares the first and last four characters with the correct address (starting with 0x70AE and ending with 5C15) to disguise itself in the Safe interface preview. The stolen funds are fully traceable and are currently stored in three cold wallets on Ethereum, containing approximately 2784 ETH, along with about 170,000 USDT that were cross-chain transferred out.

The attacker also created a large number of counterfeit addresses and sent false transfer events to these addresses using Unicode-forged token symbols in an attempt to confuse tracking. This counterfeit address construction technique is the same as the method used when attacking this project. The attacker had pre-built a large-scale infrastructure, indicating that this was an industrialized operation rather than an opportunistic attack.

-- Price

--

You may also like

Tokenized US stocks are not the "liquidity killer" of the crypto market

"As garbage coins are gradually eliminated, the protocols, infrastructure, and financial products that can truly create value have the opportunity to obtain a more reasonable valuation."

Why do I still have confidence in ETH?

As stablecoins and RWAs accelerate on-chain, Ethereum's role as a global value settlement layer has only just begun, and the market will eventually reprice ETH.

CRCL surges and plummets, COIN follows with a dive: The real battle for interests behind the CLARITY Act

The leak of the CLARITY bill draft has triggered a plunge in Circle and Coinbase, directly hitting the core provision of the stablecoin "ban on interest," revealing the deep political and economic game in Washington's strict prevention of stablecoins evolving into on-chain savings accounts and the c...

What Is TradFi and Why Is Everyone Talking About It in 2026?

Gold is rallying, SpaceX is heading for a historic IPO, and oil remains highly volatile. Discover why TradFi is back in focus and how crypto traders can access these opportunities with USDT. Put another way, TradFi Is Having Its Biggest Moment Ever, and Crypto Traders Are Perfectly Positioned

From Poland to Paris: A Look Back at WEEX's Global Community Journey in May 2026

Follow WEEX's global journey across Poland, Barcelona, Dubai, Milan and Paris. Explore Bitcoin Pizza Day, LALIGA VIP experiences, Web3 networking events, trading education and more from an action-packed May.

WEEX WXT Eco Carnival: How to Join WXT Events and Plan Trading Tasks

The WEEX WXT Eco Carnival is an ecosystem campaign built around WEEX Token (WXT), designed for users interested in platform tokens, spot trading, futures trading, deposit tasks, and referral rewards.

Contents

Popular coins

Latest Crypto News

Read more
iconiconiconiconiconiconicon
Customer Support:@weikecs
Business Cooperation:@weikecs
Quant Trading & MM:bd@weex.com
VIP Program:support@weex.com