Skip to content
NewA calmer, faster ZeroHour

Alleged Wagyu leak links 4,580 swaps to Monero addresses and IPs

Original title: Alleged Wagyu Leak Contains 4,580 Completed Crypto Swaps Linking Monero Wallets to IP Addresses

GBHackersby Mayura Kathir ()3 min read1
Part of a story covered by 2 sourcesAlleged Wagyu.xyz leak ties Monero swaps to client IP addressesMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Hudson Rock has not authenticated the files, and WhiteArmor listings do not prove intrusion or ransomware.

An alleged leak from crypto swap service Wagyu.xyz reportedly contains 38,628 order records from July 18 to October 26, 2026, and an index of 10,139 IP addresses. Within completed cross-chain swaps, 4,580 records combine transaction hashes, Monero receiving addresses and client IPs. Hudson Rock says this would show off-chain privacy failures, not a break of Monero cryptography. Ransomware trackers indexed WhiteArmor listings naming Wagyu, but those claims do not establish intrusion.

Unconfirmed: Hudson Rock has not authenticated the files’ breach origin, and wallet labels are unproven.

Key facts
  • The dataset reportedly includes 8,137 native Monero destination orders, 6,692 marked completed.
  • Eleven thousand three hundred seventeen Monero-input orders were identified, with 9,187 completed records keeping outgoing hashes.
  • Six completed withdrawals labeled “Poloniex Hacker” total about $1.03 million.
  • Orders labeled “Theft” total about $1.72 million, and Tornado Cash-labeled orders total $3.56 million.
  • Labels and mixer associations do not by themselves prove stolen funds or criminal activity.
Security assessment · AI, from the article

Impact: Alleged exposure of swap records, Monero addresses and client IPs

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

3 min read at gbhackers.com

An alleged leak from cryptocurrency swap service Wagyu. xyz contains 4,580 completed cross-chain swaps linking incoming transaction hashes, Monero receiving addresses, and client IP addresses. The dataset reportedly includes 38,628 order records from July 18–October 26, 2026, plus an activity index covering 10,139 distinct IP addresses.

GBHackers

By Mayura Kathir · gbhackers.com

Read the full article at GBHackers

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.