Crypto trader @frogmanhaha lost more than $4 million after attackers drained two of his Solana wallets in the early hours of October 7, 2026, as the TOKEN2049 conference opened in Singapore. The trader said he was asleep at the time and has so far found no evidence of a breach on his phone or email, though he acknowledged meeting "a lot of new people" in Singapore.
Onchain data showed the drain occurred at 4:14 a.m. Singapore time, about 16 minutes before the trader's initial 4:30 a.m. estimate. Attackers sold the stolen tokens in four equal lots within nine minutes. The largest assets taken included 1.43 million BP worth around $1.77 million, 13.96 million MARSCOIN worth about $1.55 million, and roughly 3.7 million CASHCAT worth about $515,000. Six smaller holdings made up the remainder.
The attacker converted the proceeds into ETH, BNB, and SOL, then moved funds through Privacy Cash and Chainflip, making the trail harder to trace. Onchain analyst EmberCN flagged the transactions about five hours before the trader publicly confirmed the theft.
The incident reignited security concerns at a time when crypto losses are already elevated. September was the worst month of 2026 for hacks, with $766.49 million stolen, including the $387.5 million Bitget hot-wallet compromise and a $320 million Liquid Network exploit, of which about $285 million was returned. Third-quarter losses reached $1.2 billion, up 53% from Q2, and reported incidents rose 12.8% quarter-on-quarter to 247.
