Crypto keys drained from Railway: $371K swept across 500+ txns on 19+ EVM chains
banteg · x · 2026-10-22
Security researcher tayvano confirmed that crypto keys stored on Railway were drained. The attacker appears to have used a generic sweeper script rather than anything custom-built for this operation.
Attacker address 0xd9773325282874d18cb83f1fe50f14c39750b2ee:
- Drained roughly $371,000
- Started Oct 21, 19:36 UTC
- 500+ transactions across 200+ distinct addresses on 19+ EVM chains
More from Safety
- Indian CA reportedly generated tiny sequential private keys, mistaking 384-bit keys for numbers 1-384 — SydSteyerhart · 2026-10-22
- Railway halts deployments after hackers may have obtained decrypted env vars — AIFlow_ML · 2026-10-22
- Extrapolating model intelligence curves: 10x more sites hacked next month — gabriel1 · 2026-10-22
- AI security veteran: agents hacked ~100 firms, stole 600K cards at ~$25 per target — joshua_saxe · 2026-10-22
- php2shell was found by GPT-5.6 Sol, not Mythos, sparking open-source frontier model risk debate — xeophon · 2026-10-22
- Ex-OpenAI policy lead jokes about the flood of AI auditing bills — Miles_Brundage · 2026-10-22