On August 7, 2026, my Ethereum wallet was compromised and approximately 3,889.359278 USDC (approximately USD 3,887 at the time) was transferred without my authorization shortly after I deposited the funds into my wallet. My affected Ethereum address is: 0x4c11aa6d5c1c27c99f4e6c48b6d4A4bd88607cB5 The legitimate transaction in which I deposited the USDC into my wallet was: 0x8aa9ef7b60b5303948fc416e9129ec44756148bcd92a1abaca1911001818f31e Shortly afterwards, the funds were removed from my wallet without my authorization in transaction: 0x0eca641149bf215fd10433ca156b72fe841d6a5e502980a84561b863399ffcb4 The fraudulent transaction appears to involve an EIP-7702 delegation. Etherscan shows my address delegating to: 0x0a3dD3fbF427316D270fbc9fCAAEDf7B8558201f The transaction itself was submitted from: 0xbD43BD6b25e80310869A56D4e395026b8256DD2A The stolen 3,889.359278 USDC were transferred to: 0x91163366e90ac0e4Df685bF21fD0267279491163 I did not intentionally authorize this transfer and did not intend to delegate control of my wallet for the purpose of transferring these funds. I suspect that a malicious EIP-7702 authorization may have been obtained through a deceptive signature or malicious dApp interaction. I cannot currently confirm whether my private key or seed phrase was compromised, so I do not want to make that claim without evidence. I subsequently traced a substantial portion of the stolen funds on-chain. Approximately 2,917.019 USDC were transferred from 0x91163366e90ac0e4Df685bF21fD0267279491163 to: 0xC2a90e99EAa1cBDB13d98c26Ab8909bB3474Fe53 Transaction: 0x8a770c5ad7b5f90e4c3079a31aafefa5cfe4aca0f522cb5746513b0dacedfc21 The destination address appears to have been operationally connected to the first recipient, as Etherscan showed that it had previously been funded by 0x91163366e90ac0e4Df685bF21fD0267279491163. The 2,917.019 USDC were subsequently moved from 0xC2a90e99EAa1cBDB13d98c26Ab8909bB3474Fe53 through the contract: 0x0889e9327b98D7d1BE3C301A4585ff3330502c9A Transaction: 0x1e9efdc31f7b484f2dc887d7aa587c72412df4552f2e9574be3634fcc414b95c This transaction appears to have routed/swapped the funds through DeFi liquidity, including Uniswap V3. During my investigation I also observed phishing/spam activity involving fake ERC-20 tokens designed to imitate ETH, USDT and USDC. I have excluded those fake-token transfers from the tracing above to avoid confusing them with the genuine stolen assets. I believe this is part of a broader wallet-draining/phishing operation rather than an isolated accidental transfer. I am reporting all known addresses and transaction hashes so that the stolen funds can be traced further and, if they reach a centralized exchange or other identifiable service, the appropriate service and law-enforcement authorities can potentially be contacted.