SECURITY ALERT
He was asleep.
The wallets were not.
The crypto trader known as Frogman (@frogmanhaha) says more than $4 million was drained from his wallets at about 04:30 Singapore time on Wednesday (20:30 UTC on Tuesday), while he was in the city during TOKEN2049.
The figure is his own estimate. On-chain researchers put it in the same range.
The cause is unconfirmed.
Post by @frogmanhaha on X: https://x.com/frogmanhaha/status/2107702850679943584
He said he did not yet know how, and that he had met many new people in Singapore.
What the chain shows about Frogman’s losses
At 01:59 UTC, the on-chain analyst EmberCN reported that nine assets had left the wallet about five hours earlier, roughly $4 million in total.
At 06:24 UTC, Lookonchain reported that two wallets were hit. Its largest positions:
- 1.43 million BP, about $1.77 million.
- 13.96 million MARSCOIN, about $1.55 million.
- 3.7 million CASHCAT, about $515,000.
Both researchers say the attacker swapped the tokens into ETH, BNB and SOL. EmberCN says the proceeds then moved through Privacy Cash and the cross-chain swap service Chainflip.
The swaps were public. The destination is not.
Dollar values are the researchers’ estimates at posting time. What the attacker realised in thin token markets may differ.
No freezes or recoveries had been reported as of 07:30 UTC.
How did the attacker get signing access to two separate wallets in one night?
Protect yourself
- Keep event-week activity on a separate, low-balance wallet; leave long-term holdings on a hardware device at home.
- Do not scan unfamiliar QR codes or install apps shared at events or in DMs.
- Never type a seed phrase into a website, form or “support” chat.
Corrections and new evidence: [email protected]
Produced by the Crypto Watch Desk newsroom using AI tools. This article is for information only and is not investment advice.