Crypto Heist: $2M Vanishes in 30 Seconds – Move-to-Earn Turns Move-to-Steal

The Great SWEAT Escape

  • 13.7 billion SWEAT tokens? Gone. Poof. Like a fart in a windstorm.
  • Attacker: “Catch me if you can!” vanishes into blockchain ether

Ah, the crypto world-where “move-to-earn” turns into “move-to-steal” faster than you can say “decentralized exchange.” Sweat Economy, the brainchild of the NEAR Protocol, got a little too sweaty this week when a cunning thief made off with a cool $2.63 million in SWEAT tokens. And how long did this masterstroke take? Thirty seconds. Less time than it takes to microwave a burrito.

According to Blockaid, the blockchain security firm that’s basically the Sherlock Holmes of crypto, the exploit happened at 13:36 UTC. The thief, using a wallet address with the oh-so-memorable tag “3be304b,” emptied the accounts faster than a teenager raiding the fridge after school. The funds were then whisked away through Ref Finance and cross-chain bridges like Wormhole, because nothing says “I’m a professional” like laundering crypto across multiple blockchains.

🚨Community Alert: Ongoing exploit on @SweatEconomy on @NEARProtocol.

Exploiter: 3be304b2151870b2be88b9de0b80acab921337ad152584138bd852fc6e9ae018

Largest exploit tx: DvrSMfY85Anc6AuLUmoEDkDdab7qX5NUZLu76HN8NoPn
– Blockaid (@blockaid_) April 29, 2026

The Heist, Step by Step

So, how did this happen? Well, the attacker didn’t just stroll in-they sprinted. In 30 seconds flat, they siphoned off 13.71 billion SWEAT tokens, which is roughly 67% of the total supply. That’s like showing up to a potluck and eating 67% of the casserole. Rude? Yes. Impressive? Also yes.

The thief then played a game of crypto hopscotch, moving funds through Ref Finance and cross-chain bridges. By the time Blockaid caught up, the attacker had stashed $2.68 million in a primary wallet, $761,000 in a secondary wallet, and swapped $20,000 into NEAR and USDC. Because why not? Variety is the spice of life-and theft.

Independent investigator SomaXBT chimed in, estimating the losses at $2.5 million. Meanwhile, the Sweat Foundation? Radio silence. No statement, no fix, just the sound of crickets and the faint echo of “uh-oh.”

$2.5 million worth SWEAT tokens
– SomaXBT (@somaxbt) April 29, 2026

Crypto Exploits: The Never-Ending Saga

This isn’t the first time the NEAR ecosystem has been in the hot seat. Earlier this month, Rhea Finance lost $18.4 million to a hacker who created fake token contracts and added liquidity to fresh pools. Essentially, they played the system like a fiddle, tricking the oracle and validation systems into approving fake transactions. Bravo? Not really.

And let’s not forget Drift Protocol, which lost a staggering $270 million earlier this year. That one was due to compromised access controls, not smart contract manipulation. So, at least they’re mixing it up? Small comforts.

The latest exploit underscores the Wild West nature of decentralized finance. Cross-chain tools? Great for obscurity, terrible for security. With high-profile incidents piling up, it’s clear that protocol security, risk management, and user protection need a serious upgrade. Or maybe just a lock.

Until then, keep your tokens close and your blockchain security closer. And if you’re a hacker reading this? Please consider a career in ethical hacking. The world needs you-just not in the “steal millions in 30 seconds” way.

Read More

2026-04-29 21:43