Back

Ethereum Wallets Drained in Suspected LastPass Seed Phrase Breach

According to on-chain investigator Wazz, one address drained hundreds of older Ethereum-compatible wallets, including long-inactive Ethereum mainnet accounts, with estimated losses exceeding $800,000.

ETH

Fact Check
The core claim — one address draining hundreds of older Ethereum-compatible wallets including long-inactive mainnet accounts, with losses exceeding $800,000, suspected to be linked to a LastPass seed phrase breach — is well-corroborated. The X post at cryptodotnews/status/2049956179149820347 directly confirms the $800k+ figure and hundreds of EVM wallets drained. The Odaily news flash confirms the same-address drain of hundreds of ETH mainnet wallets inactive for 7+ years and the LastPass secure notes theory. CryptoSlate and OurCryptoTalk independently corroborate the mass drain of dormant Ethereum wallets in April 2026. The main uncertainty is the specific attribution to 'Wazz' as the on-chain investigator: the Odaily source credits 'Capitulation' for the LastPass theory, and the X post links in the claim reference Wazz but could not be directly verified from the fetched content. The LastPass connection is described as suspected/possible rather than confirmed across all sources. The $800k figure and the hundreds-of-wallets detail are consistently reported.
    Reference: 1
Summary

A wallet-draining campaign has affected hundreds of Ethereum-compatible wallets, with estimated losses exceeding $800,000. According to on-chain investigator Wazz, a single address drained many wallets on Ethereum mainnet, including several that had been inactive for more than seven years. The older topic reports that the wallets targeted were mainly created four to eight years ago, reinforcing the possibility that older credentials were compromised. Crypto user Capitulation said the most likely vulnerability was seed phrases stored in LastPass secure notes in 2020 and 2021, though no formal forensic conclusion or official confirmation from LastPass or Ethereum-related organizations was provided.

Terms & Concepts
  • Seed phrase: A set of recovery words that restores control of a crypto wallet if a device is lost or replaced.
  • Ethereum mainnet: The primary live Ethereum blockchain where real transactions and assets are processed.
  • Wallet draining: A form of crypto theft in which attackers move funds out of a victim’s wallet, often after gaining approval through malicious signatures or compromised access.