What happened
On February 15, 2026, Moonwell — a lending protocol operating on Base and Moonbeam — suffered an exploit resulting in approximately $1.78M in losses, reported by DeFiLlama as an oracle/liquidation-related incident. The graph this page used to show was built against Ethereum mainnet, not Base, and was cleared on 2026-09-16; a re-trace on October 8, 2026 put a new graph on this row, and not one transfer in it can be dated to the window of the incident it is filed under. ChainHint therefore states no count, no endpoint and no destination from it, and the loss figure and the classification above are DeFiLlama's.
How the funds moved
Initial Extraction
Funds extracted from Moonwell's lending markets on February 15, 2026, consolidating at the attacker address below before dispersal began.
Wide Dispersal
The stolen funds were reported as routed over bridges off Base/Moonbeam and cycled through DeFi protocols.
Where the record stops
Every transfer in the graph on this row falls outside the window of this incident, or carries no date at all — so ChainHint states no endpoint count, no destination breakdown and no recovery lead for it.
Visualized attack path
Key findings
Attacker Address
Aftermath
Investigate your own incident
ChainHint traced the Moonwell hack in minutes.
Use the same tool for your case.