On-chain trace of the @nimiq Polygon exploit (16 Sep): ~$50.4k drained via a forged OpenGSN relay call. Where the money is RIGHT NOW: 50,447.83 DAI, untouched since 16 Sep 23:37 UTC, at 0x4b0E8B2c38B0044405e24db481d00bE7d5419e04 (Ethereum) @NimiqCommunity
2
4
7
925
Path of the funds: Nimiq wallet → HTLC handlers (26,130.64 USDC + 24,332.49 USDT0 + 0.66 USDC.e) → attacker wallet 0x4b0E… (Polygon) → USDT0→USDC on KyberSwap (Uniswap V4 pool) → bridged to Ethereum via LI.FI/Jumper + Eco (14 s) → USDC→DAI on Sky PSM → parked.

Sep 19, 2026 · 5:04 PM UTC

2
3
76
Why DAI? USDC (Circle) and USDT (Tether) can be frozen. DAI can't. The attacker converted 11 minutes after the exploit and then went silent.
2
53