Solana Genesis Wallet Drained of 180,900 SOL ($14.2M) — Attacker Bridges to Ethereum as ZachXBT Flags Theft

An early SSOL$78.48▲0.68% wallet tied to the network’s genesis token distribution has been drained of approximately 180,900 SOL — roughly $14.2 million — in a theft that on-chain investigator ZachXBT says saw the attacker unstake the tokens, bridge them to EETH$1,810.72▲1.41%, and convert the proceeds into about 7,918 ETH. The incident, first surfaced by ZachXBT and corroborated by CryptoBriefing and Pluang, appears to target a long-time holder whose wallet dates to Solana’s earliest token allocation phase.

The mechanics matter as much as the headline number. Before moving anything, the attacker had to unstake the SOL — a detail that signals the victim had been sitting on a staked position for a long time, the kind of set-it-and-forget-it behavior typical of genesis-distribution recipients who never rotated their stack. Once the unstaking cleared, the SOL bridged over to Ethereum and got swapped into ETH. The dollar conversion is almost uncanny: 180,900 SOL at $78.01 per token works out to roughly $14.11 million, while 7,918 ETH at $1,798 comes to approximately $14.24 million. Near-perfect parity. Fast, too — the bridge and swap locked in value before any meaningful trail could form.

ZachXBT flagged it publicly. He’s the pseudonymous on-chain investigator who has built a track record tracing high-profile crypto thefts. A CoinTelegraph alert echoed his findings, describing the victim as an early Solana whale tied to the genesis distribution who was likely hacked. The story spread fast on social media, driven in part by a Reddit r/CryptoCurrency post that cited ZachXBT’s work and floated the claim that this could be the “biggest hack from an individual” in crypto history. That is an unverified social-media assertion — community speculation, not a confirmed record — and should be read as such.

The broader market backdrop is already jittery. As of July 11, 2026, the crypto Fear & Greed Index sits at 26 out of 100, deep in “Fear” territory, with total market capitalisation at $2,285.4 billion. SOL itself is under pressure: trading at $78.01, down 1.55% over 24 hours and 4.41% on the week, with a market cap of $45.41 billion and 24-hour volume of $1.61 billion. Ethereum — the chain the attacker fled to — is comparatively steady at $1,798, off just 0.11% in 24 hours but up 2.3% on the week, with a market cap of $216.93 billion. Choosing ETH as the exit vehicle was a liquidity call. Nothing more.

Why a Genesis Wallet Changes the Story

What sets this apart from a run-of-the-mill exploit? The victim’s profile. Genesis-distribution wallets are a small, closely watched population. A holder who staked from inception and never touched the position is exactly the kind of address that draws long attention — from analysts, and apparently from attackers too. The requirement to unstake before draining suggests the SOL was locked in a staking contract, which may have added a delay but didn’t stop anything. No statement from the Solana Foundation or any law-enforcement body has appeared in any source as of reporting time.

CryptoBriefing published its account roughly 23 hours before this story was compiled, which means the incident is fresh and still moving. The full timeline stays patchy — when the unstaking began, exactly how long the bridge took, whether the ETH has already moved again. ZachXBT’s on-chain tracing is the primary evidentiary spine here. His methodology typically means following wallet clusters across chains rather than waiting on victim self-reporting.

The Skeptical Read

Social-media claims of record-breaking hacks routinely lap verified accounting, and the “biggest individual hack” framing serves engagement as much as it serves accuracy. Strip that away and the confirmed facts are narrower: a genesis-era wallet lost roughly $14.2 million in SOL, the funds landed on Ethereum as ETH, and an established on-chain investigator has put his name behind the trace. Motive, identity, historical ranking — all of it still unconfirmed.

Solana’s price reaction has been muted relative to the scale of the theft, but a genesis-distribution drain carries a particular psychological weight for long-term stakers who assumed their positions were locked away safely. The 7,918 ETH is sitting on Ethereum right now. If the attacker starts moving it — fragmenting across smaller wallets, the standard tell for someone preparing to cash out — that activity will be visible on-chain and ZachXBT will almost certainly flag it within hours.

The next hard data points to watch: any statement from the Solana Foundation, confirmation of law-enforcement involvement, and the first on-chain movement of that ETH.