On 24 October 2026, 2,597 NFTs were drained from 153 Hedera wallets, and none of the owners signed anything. Hedera Monkeys, HashPack x HMNKY, Banana Peel and Early Monkeys were hit, and other NFT projects too. This page shows public on-chain facts only. It names no person and makes no claim about who is responsible.
“Minted so far” and “max supply” as recorded on the Hedera token, snapshot 25 Oct 2026. All drained NFTs are still at the receiving address.
STILL HOLDING? PROTECT YOUR NFTs
Open hashscan.io → your account → Allowances. If you see 0.0.3927013 or 0.0.6028958, act now.
Create a brand-new wallet, not one of your other existing wallets. Old wallets may carry the same “approve all”.
Check the new wallet's Allowances on HashScan. It must be empty. Associate the tokens, then send all your NFTs there.
ECDSA wallets: revoke via hashscan.io → your account → Allowances → “approved for all”. Older ED25519 wallets can’t connect there, and “delete allowance” in the wallet does not remove an approve-all, so move to a fresh wallet instead. Your key type is shown on HashScan under “Key”.