Introducing the Creator Grant Program
We're backing independent creators with up to $4,000 to make great content about Base, our ecosystem, and builders
Learn more โ
MINT ANNOUNCEMENT
Thursday, September 3 ยท 6 PM UTC
Supply: 3333
Phases: GTD + WL only
Mint price: FREE
Final quest: grab your unique PFP and get ready to mint on zcash:native - full details on the site:
๐ https://t.co/oO3ulRAREo
Complete before access closes.
๐จ SECURITY INCIDENT / POSSIBLE WALLET COMPROMISE โ @nansen_ai
I need help investigating what appears to be unauthorized activity involving my Nansen wallet(s).
What makes this especially concerning: I had fingerprint/passkey authentication enabled for access to my Nansen wallet. I did NOT knowingly authorize these transfers.
Here is the timeline:
#1. $100 Nansen raffle reward
I won a $100 Nansen raffle reward, and the USDC was credited to my Nansen Solana wallet:
DM2roKySExA77d89VYsLGdbbsuMeQ6yBmHdFSPrxPR85
About 3 hours later, the $100 USDC was sent out without my authorization.
Tx:
3NPaBrjRJwK3PKwNb5MqQEo3N3itoGtkwbqouHwXL1oosc2uPoRLWAZnNLriMaih9fCxZZj6cSybWGMgddLg19xV
Sent to:
2YXUA9ZYK3XeyfGLhunoxzDvMzAeue3K5cGAxjP6Ksev
I did not initiate this transfer.
--------------------------------------------------------
#2. Earlier $369.74 USDC incident
My Nansen/Hyperliquid EVM wallet:
0x43e043cE641b8320B2A887265EbC0D8CfF580aB1
First, 369.940605 USDC was withdrawn from my Nansen/Hyperliquid trading account to Arbitrum.
Because of the 0.20 USDC CCTP fee, 369.740605 USDC arrived on Arbitrum.
The Circle CCTP transaction:
0x2b11cac279d358f568d87437e79d84c710b4419a9b5609b36780a228fc4a83fc
Then exactly 369.740605 USDC was transferred from my wallet without my authorization:
0x97daeb63f1a39f98418f3fba40d2cdf75399ea6a6cd4863c7a002c0b40e6e143
Destination:
0x15Fd861285ad92175fcCE2D5252dc4064DAd8102
I did not initiate any transaction related to this transfer.
#3. Why I'm concerned
The two incidents involve different chains:
โข Solana โ unauthorized $100 USDC transfer
โข Arbitrum โ unauthorized 369.740605 USDC transfer
And I had fingerprint/passkey authentication enabled.
#4. What I am asking
@Nansen_AI โ please urgently investigate whether this is:
โข an isolated wallet compromise
โข a compromised account/session
โข a Privy/Nansen wallet/signing issue
โข an unauthorized device/session
โข a malicious dApp/session/approval
โข or something affecting multiple Nansen users
@zachxbt โ could you please investigate the on-chain destinations and determine whether these funds are connected to the same attacker/entity?
I am especially interested in whether the Solana recipient and Arbitrum recipient ultimately connect to the same cluster.
#5. Important clarification about Circle/CCTP
The earlier $369.74 movement involved Circle's CCTP infrastructure during the Hyperliquid/Nansen โ Arbitrum flow.
I am NOT claiming Circle was hacked.
I am asking investigators to determine exactly how the funds moved through the CCTP/Hyperliquid flow and then ended up being transferred from my wallet.
#6. If anyone else using Nansen has experienced unexpected USDC/SOL transfers, especially after receiving funds or raffle rewards, please check your wallet history and report it.
I have already contacted Nansen Support and am preserving the transaction hashes/screenshots.
I have not shared my seed phrase or private key.
Please investigate whether this is an isolated incident or potentially something much larger.
@nansen_ai@zachxbt
Just won $100 USDC on @nansen_ai ๐
Trade tokens or perps with my link โ you're in next week's #NansenRaffle
$1M in rewards, $100k every week ๐ https://t.co/hoisD82NHg
Perps are now live on Prism
Powered by @GMX_IO, no added fees on top
Try MOSS, now in private beta, for a smoother trading experience.
Step 1: Click on MOSS Connect (you must be logged out of any wallet)
Step 2: Create an account and fund it
Step 3: Enable one-click for the duration of your choice
Proven perps infra for a sharper onchain trading experience
Link in reply