OFFICIAL INCIDENT REPORT – MTT TOKEN SECURITY EVENT

Dear ONFA community members,

We regret to inform you that a security incident involving unauthorized access to a wallet holding MTT tokens has occurred. Below are the full details of the event:

Incident Overview

• Affected Token: MTT

• Amount Involved: 174,875.542746983135816445 MTT (~$3,091,790.37)

• Compromised Wallet Address:
  0x65E9511c39DB6694772f33aFe3Cc7d31F947de96

• Transaction Hash:
  0xbcf0bd4c3d3d08dace7d5a132b4bec7be0614b2b350094e9a59aafd46382e24a

• Time of Incident:
  April 07, 2026 – 12:20:20 PM (UTC)

Attack Flow & Fund Movement

Following the initial exploit, the stolen funds were transferred to the attacker wallet:

0x9e338C7DC9Bd692E1c3420b1b3F933aec968A9D6

The attacker then executed a structured fund distribution strategy:

• A small portion (2 MTT) was swapped via liquidity pool:
  PancakeSwap V2: MTT-BSC-USD 9
  (0x3988a867ce4a6f107d7812302d9bc786ba3fc2d8)

• 10,010 MTT was transferred to:
  0x4A5e71Bb1A0c9bB46eA5B1a5C74414bc29916e12

• From this wallet, funds were distributed using multisend contracts:

  • CoinTool: MultiSender

  • 0x7B52863b68905Af0990b77B1fD28e9B06817bA89

• 100 intermediary wallets were used

From these wallets:

• Multiple swap transactions were executed

• MTT was sold into PancakeSwap liquidity pool

• Total transactions exceeded 480 transactions

???? Detailed wallet mapping (attack flow & related addresses):
https://docs.google.com/spreadsheets/d/1hp9ChpEwQpob0v6zcRM05uCZfcovRyMKBtIO4cHT_zs/edit?usp=sharing 

Current Status & Risk Assessment

At the time of writing, the attacker wallet:

0x9e338C7DC9Bd692E1c3420b1b3F933aec968A9D6

still holds:

164,773.542746983135816445 MTT

⚠️ This remaining balance poses a critical market risk.

If these funds are liquidated via PancakeSwap:

• Liquidity pools may be severely impacted

• Token price may drop sharply

• Users may suffer direct financial losses

Actions Taken

We have formally contacted and are working closely with:

• MEXC Exchange

• Bitmart Exchange

to:

• Monitor and block suspicious deposits

• Identify and freeze related accounts

• Prevent further fund movement

• Support investigation and mitigation efforts

Commitment

We are actively monitoring the situation and coordinating with relevant parties to mitigate risks and protect our ecosystem.

Further updates will be provided as new information becomes available.

Antonio T. Le
VP of ONFA FINTECH
Date: April 09, 2026