Wrapped Pulse (WPLS)

Regarding this incident, I have shared promptly when community friends asked.

I have some time now. Let me pen it down.

The exploit was not a smart contract hack on @PulsechainCom, @piteasio, @PulseXcom, or any DEX/protocol itself. It was a user-side attack targeting blind signing of a maliciously crafted transaction.

The victim blind-signed a transaction where attackers had inserted a different destination wallet directly into the calldata. This drained 43.7 billion WPLS ($350k–$367k at the time) in one tx on April 22/23, 2026.

Thread 👇

Regarding this incident, I have shared promptly when community friends asked.

I have some time now. Let me pen it down.

The exploit was not a smart contract hack on @PulsechainCom, @piteasio, @PulseXcom, or any DEX/protocol itself. It was a user-side attack targeting blind signing of a maliciously crafted transaction.

The victim blind-signed a transaction where attackers had inserted a different destination wallet directly into the calldata. This drained 43.7 billion WPLS ($350k–$367k at the time) in one tx on April 22/23, 2026.

Thread 👇

Regarding this incident, I have shared promptly when community friends asked.

I have some time now. Let me pen it down.

The exploit was not a smart contract hack on @PulsechainCom, @piteasio, @PulseXcom, or any DEX/protocol itself. It was a user-side attack targeting blind signing of a maliciously crafted transaction.

The victim blind-signed a transaction where attackers had inserted a different destination wallet directly into the calldata. This drained 43.7 billion WPLS ($350k–$367k at the time) in one tx on April 22/23, 2026.

Thread 👇