Post claims crypto keys on Railway were drained across multiple chains
A post by tay (security) claims that crypto keys stored in Railway were drained, describing the tool used as a sweeper script rather than something built for this specific operation. The post states an attacker address 0xd9773325282874d18cb83f1fe50f14c39750b2ee took roughly $371,000 on Oct 21 at 19:36 UTC across 500+ transactions, 200+ distinct addresses and 19+ EVM chains.
Why “Unverified”
- Reported by tay alone, with no second source or primary confirmation yet
1 independent source group across 1 post · evidence score 77/100. How labels work
Other reports on this event
Its sources described the event in different words, so it was kept as a separate story with its own label. How reports are linked
What the sources claim
-
Crypto keys that were stored in Railway were drained by an attacker.
“They did drain crypto keys that were in Railway.”
tay -
The attacker address 0xd9773325282874d18cb83f1fe50f14c39750b2ee took about $371,000.
“Attacker: 0xd9773325282874d18cb83f1fe50f14c39750b2ee ~$371,000 Oct 21 19:36 UTC”
tay -
The drain involved 500+ transactions across 200+ distinct addresses and 19+ EVM chains.
“500+ txns 200+ distict addresses 19+ EVM chains”
tay -
The tool used appears to be a general sweeper script rather than one built for this operation.
“Seems like an okay sweeper script (read: not something homegrown for this one op)”
tay
Sources
More in Hacks & Security
Summary and claims extracted by AI with prompt analyze-story@5 on 2026-10-22 00:00 UTC. Labels are computed from the sources, not by the model.