`0xaa843ed65c1f061f111b5289169731351c5e57c1`

0xaa843ed65c1f061f111b5289169731351c5e57c1 is a cryptocurrency wallet address that 2 published sources report in connection with unclustered DPRK activity, which public reporting attributes to North Korea (DPRK). It is cited here from QuillAudits and Rekt. The earliest of those reports is dated 2026-04-03 and the most recent 2026-04-09.

wallet address DPRK (cluster unattributed) MATCHED IN SOURCE

Listed as Ethereum

First seen 2026-04-03 · last seen 2026-04-09

Sources

…in an April 1st attack compromising devices and draining funds. Relevant Address and Transactions Attacker EOAs Ethereum 0xAa843eD65C1f061F111B5289169731351c5e57C1 0xD3FEEd5DA83D8e8c449d6CB96ff1eb06ED1cF6C7 0xbDdAE987FEe930910fCC5aa403D5688fB440561B 0x0FE3b6908318B1F630daa5B31B49a15fC5F6B674…
Drift Protocol $285M Multisig Exploit (Explained) — QuillAudits · under “Relevant Address and Transactions” · published 2026-04-03 · pulled 2026-09-11
…stolen funds into ETH across four receiving addresses . Attacker EOAs on Ethereum: 0xD3FEEd5DA83D8e8c449d6CB96ff1eb06ED1cF6C7 0xAa843eD65C1f061F111B5289169731351c5e57C1 0xbDdAE987FEe930910fCC5aa403D5688fB440561B 0x0FE3b6908318B1F630daa5B31B49a15fC5F6B674 Three weeks of preparation.…
Drift Protocol — Rekt · under “128 Seconds” · published 2026-04-09 · pulled 2026-09-12

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: Drift Protocol $285M Multisig Exploit (Explained)

QuillAudits lists 7 other indicators in this source.

Cited by the same report: Drift Protocol

Rekt lists 8 other indicators in this source. 4 are shown, chosen across types.

All 9 indicators from this source