Wallet drain cashed out to attacker's Binance deposit address (26 Aug 2026) — ETH address 0x152bC6…a5bdD4
0x152bC6cEF7e314CF208c6185651597554Fa5bdD4
PublicAML knows this Ethereum address as Wallet drain cashed out to attacker's Binance deposit address (26 Aug 2026), a hack. Our AML risk score for it is 100 of 100, which we read as critical risk. This address is itself listed by documented incident.
What we know about this address
| Chain | Ethereum (ETH) |
| Entity | Wallet drain cashed out to attacker's Binance deposit address (26 Aug 2026) |
| Category | hack |
| AML score | 100 / 100 (critical) |
| Cluster size | 29,623,811 addresses |
Risk findings
Each row carries the source that flagged it. A row at zero hops names this address directly; any other row is a path our propagation engine traced from a flagged address to this one. A finding is an observation about the flow of funds or about a published listing, not a statement about the owner of this address.
| Finding | Source | Hops | Direction |
|---|---|---|---|
| This address is itself listed by documented incident. | documented incident | 0 | direct |
| This address is itself listed by documented incident (0x152bc6…a5bdd4).0x152bc6cef7e314cf208c6185651597554fa5bdd4 | documented incident | 0 | inbound |
| Funds reaching this address are 5 hops from OFAC SDN list (0xb33896…a71f33).0xb338962b92cd818d6aef0a32a9ecd01212a71f33 | OFAC SDN list | 5 | inbound |
| Funds reaching this address are 5 hops from OFAC SDN list (0x57ec89…761259).0x57ec89a0c056163a0314e413320f9b3abe761259 | OFAC SDN list | 5 | inbound |
| Funds reaching this address are 6 hops from OFAC SDN list (0x7ced75…27361e).0x7ced75026204ac29c34bea98905d4c949f27361e | OFAC SDN list | 6 | inbound |
| Funds reaching this address are 7 hops from OFAC SDN list (0x1999ef…0c5ade).0x1999ef52700c34de7ec2b68a28aafb37db0c5ade | OFAC SDN list | 7 | inbound |
| Funds reaching this address are 7 hops from OFAC SDN list (0x38735f…3c6a94).0x38735f03b30fbc022ddd06abed01f0ca823c6a94 | OFAC SDN list | 7 | inbound |
| Funds reaching this address are 7 hops from EU sanctions list (0x002471…f56f8d).0x002471b8a185f9980708d0eaec5b289714f56f8d | EU sanctions list | 7 | inbound |
| Funds reaching this address are 8 hops from OFAC SDN list (0xed6e0a…bad921).0xed6e0a7e4ac94d976eebfb82ccf777a3c6bad921 | OFAC SDN list | 8 | inbound |
| Funds reaching this address are 8 hops from OFAC SDN list (0x4f47bc…96270c).0x4f47bc496083c727c5fbe3ce9cdf2b0f6496270c | OFAC SDN list | 8 | inbound |
| Funds reaching this address are 8 hops from OFAC SDN list (0x8dce2a…8e4995).0x8dce2aac0de82bdcaf6b4373b79f94331b8e4995 | OFAC SDN list | 8 | inbound |
Incidents that name this address
Each line states the role this address plays in the incident as recorded. Being named as a victim, or as the recipient of funds, is not an accusation.
- Named as a perpetrator in Wallet drain cashed out to attacker's Binance deposit address (26 Aug 2026). Source: publicaml.org
More addresses in this index
These are other addresses in the PublicAML index, not counterparties of this one. Nothing here implies a connection between them.
Also flagged hack / theft
If this page is wrong
Attribution and risk propagation both make mistakes, and a page like this one is visible for a long time. If you own this address or can show that a finding here is incorrect, tell us and we will re-check it. Corrections are applied to the underlying data, so they carry over to the API and to every other view of this address.
See something wrong on this page? Tell us and we will check it.
PublicAML reports what it can observe on-chain and what public and vendor sources say about an address. Nothing on this page is a legal finding, an allegation against a person, or advice. Risk scores describe exposure through transaction paths, and an address can carry exposure without its owner having done anything wrong.
Data is read live from the PublicAML API at the time this page was served.
Reports naming this address
Filed with PublicAML by readers. A report is an account of what happened to the person who filed it. It is not our finding, and it does not on its own put a risk label on this address.
- Other
My wallet seed phrase was compromised and my funds were drained. The stolen funds were sent to this address: 0x152bC6cEF7e314CF208c6185651597554Fa5bdD4. Requesting it be flagged as a hacker/theft address.
Filed by a vetted PublicAML investigator rather than by an anonymous reader. The account itself has not been independently re-checked.
Is this your address?
Leave your email and we will watch this address for you: you hear from us when money moves through it or when what we know about it changes. We cannot recover anyone’s money, and we will not pretend otherwise — but you will not have to keep checking.
We use the address only to reach you about this wallet. No password to choose: you sign in with a code we email you.
If you also lost money to the wallet on this page and want to put the whole account on record, file a report. We never publish who filed one.