0xede997d36941cf3b6f6f11e72a0393c7f19b3822
0xede997d36941cf3b6f6f11e72a0393c7f19b3822 is a cryptocurrency wallet address
that 2 published sources report
in connection with EtherHiding activity, which no
published source ties to North Korea (DPRK).
It is cited here from Alex Necula (LinkedIn) and Chollima Hunter (on-chain observation).
The earliest of those reports is dated 2026-10-07 and the most recent 2026-10-12.
DPRK link unconfirmed Alex Necula ties this contract to a ClickFix infection chain delivering infostealers, including Atomic macOS Stealer, and names no actor or state; no DPRK link is published for it. The EtherHiding tracker covers every reported EtherHiding contract and wallet, not only North Korean ones, so this value may belong to another actor.
wallet address EtherHiding CURATED
Sources
-
Queries a smart contract on Polygon (e.g., 0xf55Bea...753E) using the eth_call JSON-RPC method.
Polygon wallet that deployed the configuration contract 0xf55bea1fdcf1c3abb39ab92567c09ac1bff6753e on 2026-04-27 and wrote its six setConfig values through 2026-09-19. It also deployed 0x1c4454ed4582f0dd74bf1e37171e3109dffc62a6 on 2026-04-20. On-chain observation by this site.
Hunting EtherHiding: How I Uncovered 230+ C2 Domains Hidden on the Polygon Blockchain — Alex Necula (LinkedIn) -
Polygon wallet that deployed the configuration contract 0xf55bea1fdcf1c3abb39ab92567c09ac1bff6753e on 2026-04-27 and wrote its six setConfig values through 2026-09-19. It also deployed 0x1c4454ed4582f0dd74bf1e37171e3109dffc62a6 on 2026-04-20. On-chain observation by this site.
Polygon address 0xede997d36941cf3b6f6f11e72a0393c7f19b3822 — Chollima Hunter (on-chain observation)
Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.