Reported X100 exploit proceeds have been distributed across four separate Ethereum wallets, each holding approximately 400 ETH, according to on-chain data indexed on Etherscan. The four-way s
Reported X100 exploit proceeds have been distributed across four separate Ethereum wallets, each holding approximately 400 ETH, according to on-chain data indexed on Etherscan. The four-way split places roughly 1,600 ETH in reported exploit funds across distinct addresses, multiplying the monitoring burden for any security team tracking the incident.
Three immediate facts define this on-chain event as reported. First, the proceeds are distributed across four wallets rather than a single address. Second, each wallet carries an identical reported balance of 400 ETH. Third, the X100 token contract on Etherscan provides the primary on-chain reference point for verifying activity tied to this project. For related coverage, see Future Leaders Awards & Conference 2026 to Bring Global Business and Technology Leaders to Singapore on 2–3 November.
At the time of writing, no verified statement from X100 or any named security investigator has been confirmed in available sources. The wallet split is reported; its origin, the identity of any controlling party, and the specific exploit vector remain unconfirmed in the current evidence set. For related coverage, see ESGNext Awards & Conference – Virtual 2026: Global ESG Leaders Convene Online to Advance Sustainable Business.
On-chain observers should note the symmetry: four equal tranches of exactly 400 ETH each is a non-random distribution pattern. Equal-sized outputs are a recognizable structural feature in post-exploit fund movements and warrant active monitoring of all four addresses. This is the same structural discipline that security teams applied when tracking exploit-linked wallet activity that put crypto holders at risk in prior incidents.
ON-CHAIN REFERENCE
A single-wallet holding is simpler to track: one address, one balance, one set of outgoing transactions. A four-wallet split multiplies the monitoring surface by a factor of four and introduces the possibility of independent timing on each sub-tranche's next movement. Security researchers and protocol teams must now maintain parallel observation across all four addresses simultaneously.
The equal sizing of each 400-ETH tranche is analytically meaningful. Unequal splits sometimes reflect fee deductions, on-chain costs, or partial liquidations already executed. A clean four-way equal division suggests the split was deliberate and structured, not a byproduct of transaction costs or partial conversions. This structural detail does not establish intent, but it is the type of pattern that on-chain forensics teams flag for deeper review.
No exchange deposit addresses, bridge contracts, or mixer-adjacent addresses have been identified as the next destination in available reporting. Until subsequent transfers are confirmed on-chain, the four wallets represent the last known location of the reported proceeds. Protocol participants with active exposure to Ethereum DeFi, including those using perpetuals markets on Ethereum-native venues, should treat unresolved post-exploit wallet clusters as an active network risk variable.
Multi-wallet dispersion is a documented step in post-exploit fund management observed across multiple Ethereum-based incidents. The four-address structure creates parallel tracking branches, each of which can move on independent timelines, complicating coordinated recovery or legal tracing efforts.
Four monitoring signals are directly actionable given the current on-chain state. First, any outbound transaction from any of the four 400-ETH wallets is the highest-priority alert. A move from even one tranche to a new address opens a new tracking branch and may signal the start of a conversion sequence.
Second, watch for wallet consolidation. If two or more of the four addresses send funds to a single new address, that recombination narrows the destination set and may indicate coordination among the controlling parties. Consolidation within 24 to 72 hours of the initial split is a pattern associated with rapid fund movement attempts in comparable incidents.
Third, watch for any verified statement from the X100 project team or a named blockchain security firm, such as an official post-mortem or an on-chain message sent to the flagged addresses. These communications are typically verifiable directly in Etherscan's transaction input data fields. No such statement exists in current available evidence, and readers should treat any unverified social media claim about fund recovery or perpetrator identity with caution until confirmed on-chain or by a named investigator.
Fourth, monitor whether the 400-ETH tranches interact with known high-volume Ethereum infrastructure such as decentralized exchange routers or cross-chain bridge contracts. Those interactions are immediately visible on-chain and represent the most direct signal of an attempted conversion or transfer out of the Ethereum network. Readers tracking this story should treat Etherscan address-level monitoring as the primary data source, not secondary news aggregators. For broader on-chain market context, positioning data across crypto assets continues to reflect a market attuned to security-linked volatility events.
Current status: 1,600 ETH in four equal wallets, no confirmed next destination, no verified project statement, and no independently confirmed loss figure. All four data points remain open variables that will resolve on-chain. Verification is ongoing via Etherscan.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
Read original article on marketbit.net
