CoW Protocol

SlowMist

2026-09-30 03:05:09

SlowMist founder says North Korean hackers used CoW Protocol and Chainflip to move funds into BTC

SlowMist founder Yu Xian said on Sept. 30 that the firm’s TrackAgent system identified a laundering route used by North Korean hackers to process funds stolen from Bitget. According to his post, the actors combined CoW Protocol with Chainflip in an automated workflow that started with an order on CoW Protocol and ended with the assets being bridged and converted into BTC. Yu Xian said the script set the payout address of a CoW Protocol order to a pre-arranged Chainflip deposit-related contract address. Once the order was filled, the cross-chain step on Chainflip could be completed and the funds would be swapped into bitcoin. He also shared one example transaction in which the recipient address, 0xcEAE932A8bEE3a81a681A59890cb26d3110FDb65, corresponded to a Chainflip Deposit Contract. Chainflip records tied that flow to a final BTC address, bc1qa0rjjhyu9pg3adgpel4v7dct6a8606az863jyh. Yu Xian added that Chainflip had been blocking North Korean laundering attempts, but the group used automated scripts to split funds into many pieces and quickly shifted to other cross-chain routes when risk controls or blocking measures appeared. He described the process as an "evolving laundering operation."

330

whale movemen

2026-08-16 03:28:48

Whale moved 884.55 ETH to two new wallets over the past day

Onchain Lens said a whale transferred 884.55 ETH to two newly created wallets over the past 24 hours, with the moved funds valued at about $1.66 million. Before those transfers, the same whale swapped 493.02 ETH for 928,600 USDT through CoW Protocol. The swap was valued at roughly $927,000 based on the figures cited in the source. The activity highlights a two-step sequence on-chain: first an ETH-to-USDT conversion through a decentralized trading protocol, then a separate movement of ETH into fresh wallet addresses. No additional identity details about the wallet owner were disclosed in the source.

1200

Vitalik Buter

2026-07-24 04:30:16

Vitalik Buterin’s Large ETH Sales on CoW Protocol Draw Market Attention

Vitalik Buterin carried out several large WETH transactions over roughly 12 hours, using CoW Protocol, Aave, and Socket. The moves included GHO purchases, Aave position updates, and transfers to the Null Address.

290

Vitalik Buter

2026-07-23 13:40:14

Vitalik Sells More ETH Than Planned: 17,196 ETH Dumped, Exceeding Target by 812 Tokens as ETH Drops 37% in a Month

Ethereum co-founder Vitalik Buterin sold 17,196 ETH (~$34.96M) via CoW Protocol in February, exceeding his Jan 30 plan of 16,384 ETH. ETH price crashed 37% during the same period, sparking community criticism.

530

Vitalik Buter

2026-07-22 20:10:15

Vitalik Buterin Sold 17,000 ETH This Month as Ether Fell 37%

Arkham-linked wallet data shows Vitalik Buterin's attributed holdings dropped by about 17,000 ETH this month after he had earmarked funds for privacy and security projects. Ether fell 37% over the same period.

320

whale

2026-07-22 17:55:14

Aave Whale Loses $50M in One-Click Swap Due to Extreme Slippage

A whale tried to swap 50M USDT for AAVE via Aave's frontend, but extreme slippage yielded only 324 AAVE (~$36K). Aave offered to refund ~$600K in fees; CoW Protocol said the trade executed per user's signed order.

1770

Cow Protocol

2026-07-08 21:10:12

Cow Protocol Halts Trading After DNS Hijack Compromises Frontend Domain

Cow Protocol paused services after attackers hijacked the DNS records of swap.cow.fi. The team said smart contracts were unaffected, but users who interacted with the frontend after the incident were urged to revoke approvals immediately.

460

Cow Swap

2026-07-08 21:08:12

Cow Swap Pauses Protocol After DNS Hijack Compromises Frontend Domain

Cow Swap halted protocol services after a DNS hijack affected its main frontend. The team said smart contracts were not compromised, but users who interacted with the site after the incident time were urged to revoke approvals immediately.

610