On-chain data linked to the X100 token exploit shows that proceeds were reportedly distributed across four separate wallets, each holding approximately 400 ETH, according to blockchain activi
On-chain data linked to the X100 token exploit shows that proceeds were reportedly distributed across four separate wallets, each holding approximately 400 ETH, according to blockchain activity traceable on Etherscan. The split, totalling roughly 1,600 ETH across the four addresses, reflects a distribution pattern that on-chain analysts flag as a method commonly associated with post-exploit fund management.
According to reported on-chain movements, the entity behind the X100 exploit divided the stolen proceeds into four equal allocations of 400 ETH each. The transactions are associated with the X100 token contract on Etherscan, where address-level activity points to a deliberate fund distribution rather than a single lump-sum transfer. For related coverage, see Pepeto vs Pepe vs Little PEPE as Presale Pushes Pepeto Toward The Next x100 Meme Coin In This Bull Run.
This article describes a reported transaction pattern. Attribution of the wallets to any specific individual or group has not been independently confirmed, and the movements are presented as observable on-chain activity, not established proof of identity. For related coverage, see Future Leaders Awards & Conference 2026 to Bring Global Business and Technology Leaders to Singapore on 2–3 November.
The four-wallet structure gives each address an equal share of 400 ETH. Equal-sized splits across multiple addresses are a recognisable pattern in post-exploit fund movement, making the activity easier to flag for exchange compliance teams and blockchain monitoring services. Observers tracking the X100-related addresses on Etherscan have noted the distribution as a point of ongoing interest.
The Southeast Asian crypto community has seen comparable patterns before: when the Aave v3 Loop Safe Module exploit drained 114.09 ETH, the post-exploit wallet movements were similarly tracked in real time by blockchain security firms before funds reached exchanges.
Equal-sized transfers draw attention precisely because they are structured. A single large transfer of 1,600 ETH would be immediately visible; four separate 400-ETH wallets can interact with different protocols, exchanges, or bridge services without triggering a single large-value alert.
Blockchain security teams treat symmetrical fund splits as a monitoring signal. When proceeds are divided into near-identical tranches and held in separate wallets, it suggests the controlling party is actively managing risk of detection. This does not constitute proof of any laundering attempt, but it does indicate the funds are being actively managed rather than left dormant.
Regional exchanges across Southeast Asia, including platforms operating in Indonesia, the Philippines, and Thailand, are subject to travel rule requirements that oblige them to screen incoming crypto transfers. Four separate 400-ETH deposits arriving from distinct wallets would each need to clear those checks independently, adding a layer of complexity for compliance teams. For context on how wallet-level blacklisting works in practice, the Tether blacklisting of USDT wallets linked to CoinDCX outflows illustrates how quickly coordinated action can freeze flagged addresses.
The reported wallet split does not confirm the identity of the exploiter, the specific vulnerability used, the total value of the exploit at the time funds were taken, or whether any recovery or negotiation is underway. Without a verified transaction hash or timestamp, it is not possible to independently anchor the reported 400-ETH-per-wallet figure to a specific block. The claim remains based on reported on-chain observations rather than independently verified forensic data.
Separately, on-chain investigators such as ZachXBT have set precedents for tracing post-exploit movements in real time, as seen when the NEAR Intents exploit was traced to KuCoin transfers. Whether a similar investigation is underway for X100 has not been publicly confirmed at the time of writing.
The next observable on-chain event will likely be an attempt to move funds from the four wallets, either through decentralised bridges, mixing protocols, or direct deposits to centralised exchanges. Any consolidation of the four wallets back into a single address, or fragmentation into smaller amounts, would indicate the next phase of the fund movement. Observers should watch for activity on the token's Etherscan address page as new transfers are recorded.
No official statement from the X100 project or any blockchain security firm has been included in the available evidence at this time. Any confirmed recovery negotiation, protocol post-mortem, or law enforcement referral should be treated as a separate development and reported only when confirmed by the project or a verifiable secondary source. Southeast Asian regulators, including the Securities Commission Malaysia and the Monetary Authority of Singapore, have not issued statements on this incident as of publication.
Until further on-chain evidence or official statements emerge, the key confirmed detail is the reported structure: four wallets, each holding roughly 400 ETH, linked to activity associated with the X100 token address on Ethereum.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
Read original article on kanalcoin.com
