Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BNB 
ETH 
SOL On-chain data shows that Frogman's stolen assets were sold in four batches within nine minutes.
On-chain data revealed that the attacker divided the tokens stolen from the wallet of cryptocurrency trader Frogman Solana into four equal batches for sale in just nine minutes. Frogman said he had not found any evidence of a breach on his mobile phone or emails.
The theft of funds occurred at the opening of the TOKEN2049 Conference in Singapore, at 4:14 a.m. Singapore time (i.e. 20:14 UTC on Tuesday). At the time, Frogman was in Singapore to attend the event. The two-day conference, held at the Marina Bay Sands Hotel on October 7 - 8, was sold out and attracted 25,000 attendees from 160 countries.
Frogman posted on platform X at 1:21 pm local time: "This morning when I was sleeping, my account was stolen for more than $4 million at around 4:30." He admitted that he was "not sure how it happened" and said he had made "many new friends" in Singapore. Significantly, his estimated 4:30 a.m. time was 16 minutes later than the time recorded on the chain. In his post, he thanked "the teams and individuals who are assisting in the investigation" and said he would share more details in due course.
Two of his wallets were attacked, resulting in losses of approximately US$4 million. On-line analyst EmberCN (aka Yu Jin) flagged the unusual transactions about five hours before Frogman confirmed the theft.
Composition and flow direction of stolen assets
The stolen assets covered nine types of tokens. Among them, the largest proportion is 1.43 million BP tokens worth approximately US$1.77 million, and the second largest is 13.96 million MARSCOIN tokens worth approximately US$1.55 million. The third largest position is 3.7 million CASHCAT tokens worth approximately US$515,000, with the remaining six smaller positions making up the balance.
The attacker exchanged these tokens for ETH, BNB and SOL, and the funds were subsequently transferred through two services, Privacy Cash and Chainflip. The two services are designed to make it more difficult to track funds from wallet to wallet.
The cryptographic security situation in the third quarter of 2026 is severe
Cryptopolitan reported that hacking attacks in September showed a similar pattern. Stolen funds are transferred within hours and cleaned within days through decentralized exchange (DEX) exchanges, Tornado Cash mixers, and non-authentication (No-KYC) exchanges. In addition, some of the September gains were converted into Monero and blocked Zcash.
The main reason for the significant damage was the damaged wallet key, which gave hackers access to Bitget's hot wallet. Since 2026, September has been the worst month, with hackers stealing a total of $766.49 million. The Bitget theft alone involved $387.5 million.
The amount involved in the Liquid Network exploit case reached US$320 million, although approximately US$285 million of that amount has been recovered. Total losses in the third quarter reached $1.2 billion, a 53% increase from the second quarter. The number of security incidents increased by 12.8% month-on-month, to a total of 247, of which more than 11% were phishing attacks.
In Europe, private cryptocurrency holders are also facing more targeted attacks. There were 39 such incidents in the first half of 2026, compared with only 14 in the whole of 2025.
