OFFICIAL INCIDENT REPORT – OFT TOKEN SECURITY EVENT

Dear ONFA community members,

We regret to inform you that a security incident involving unauthorized access to a wallet holding OFT tokens has occurred.

Below are the full details of the event:

Incident Overview

• Affected Token: OFT

• Amount Involved: 87,271.89673 OFT

• Compromised Wallet Address:
  0xc0f0b5d05d4732300f7b52e2e53495f832d32518

• Transaction Hash:
  0xd69b3cbbef363f50f47c7c2b91e612028f30c45561c703bf5165a3c2c40776e8

• Time of Incident:
  March 27, 2026 – 07:48:00 PM (UTC)

Attack Flow & Fund Movement

Following the initial exploit, the stolen funds were transferred to the attacker wallet:

0xeeeee90971b6264c53175d3af6840a8dd5dc7b6c

The attacker then routed funds through the following smart contract:

0x63242a4ea82847b20e506b63b0e2e2eff0cc6cb0
(KyberSwap: Aggregator Executor V3)

This mechanism was used to fragment and obfuscate the fund flow.

Subsequently:

• Funds were distributed across 123 intermediary wallets

• From these wallets:

  • 29 transactions to Bitmart user addresses

  • 17 transactions to MEXC user addresses

• Total transactions exceeded 840 transactions

Detailed wallet mapping (intermediary → exchange addresses) here:

https://docs.google.com/spreadsheets/d/17-WRCS8X7s85MNLzx7S48XYOUwXCfWvw3Dd4KqSFJi4/edit?usp=sharing

Current Status & Risk Assessment

At the time of writing, the attacker wallet:

0xeeeee90971B6264C53175D3Af6840a8dD5dc7b6C

still holds:

36,714.8967 OFT

⚠️ This remaining balance poses a significant market risk.
If these funds are deposited and liquidated on exchanges, it may:

• Disrupt liquidity pools

• Cause abnormal price impact

• Directly affect user assets on exchanges

Actions Taken

We have formally contacted and are working closely with:

• MEXC Exchange

• Bitmart Exchange

to:

• Identify and freeze related accounts

• Monitor and block suspicious deposits

• Prevent further laundering or liquidation

• Support investigation and fund tracing

As a result of the unfortunate event above, we have requested MEXC and Bitmart to temporarily restrict account(s) suspected to be involved in the matter.

Commitment

We are actively monitoring the situation and will continue to cooperate with exchanges and relevant parties to mitigate risks and protect the ecosystem.

Further updates will be provided as new information becomes available.

Thank you for your understanding and continued support.

Antonio T. Le
VP of ONFA FINTECH
Date: April 02, 2026