Candy wallet incident: what we know so far

First reported Oct 12, 2026, 14:25 UTC

Source reports

Candy wallet incident: what we know so far Starting at about 7:00 PM ET on Oct 11, SOL has been withdrawn from Candy-provided wallets into a single address that was first used for this attack: HLwZCJB8YU6Yvq8HNMMNNrLCo1xammz95bCa3jm2k75c. A first wave emptied about a dozen of… — @DC3Wiki (X), Oct 12, 2026, 14:25 UTC

Excerpts are quoted from the linked sources, which own their text.