An unidentified wallet flagged as a hacker address spent roughly $38.53 million buying ETH while the cryptocurrency's price was climbing, an on-chain purchase that has put Ethereum watchers on alert as they attempt to interpret the buyer's intent during a market rally.

The buyer's identity remains unknown; the address was labeled as belonging to a hacker rather than a named entity. According to an on-chain analyst, the purchase was carried out with the DAI and USDS stablecoins over the course of hours. Both tokens are native to Ethereum itself: DAI, issued by the long-running Maker protocol, is one of the oldest decentralized dollar tokens in crypto, and USDS is its upgraded successor, introduced after Maker rebranded as Sky in 2024. Because the funds sit with an address tied to a prior compromise, the activity is drawing closer scrutiny than an ordinary spot purchase would.

Suspicious and high-risk wallet activity of this kind is routinely tracked on security dashboards such as CertiK's Pulse, which monitors on-chain movements linked to exploits and flagged addresses. Labels of this sort typically originate with blockchain analytics firms and block explorers rather than an authoritative registry; they flag risk based on past address associations and are occasionally misapplied, so the tag points to suspicious provenance rather than a verified identity.

Why Buying Into a Rising ETH Market Draws Attention

The detail traders are focused on is the timing: accumulating aggressively into strength rather than waiting for a pullback. The purchase was reported to have occurred while ETH was rallying, which frames the move as conviction buying rather than a discounted entry.

The mechanics of the trade also carry a watchable precedent: analytics firms have documented past cases in which wallets linked to theft converted stablecoin or other holdings into ETH, one of the most liquid crypto assets and a common waypoint for moving value across exchanges, bridges, and DeFi services. That history is part of why any large swap by a flagged address draws attention, though the pattern alone does not establish intent in this instance.

The use of DAI and USDS to fund the buy also ties the story to stablecoin flows. On-chain stablecoin usage has grown alongside new dollar-token launches, including a UAE-registered dollar stablecoin added to self-custodial wallets, as well as institutional credit products such as the $1 billion facility backed by Ethena's USDe. When a flagged wallet converts that stablecoin balance into ETH, the move shifts exposure from dollar-pegged value into ETH rather than keeping it parked in dollars.

What Ethereum Watchers May Track Next

The clearest confirmation signal from here is follow-up wallet activity: additional buys, transfers to exchanges, movement into DeFi, or hops through bridges and mixing services would show whether this was a one-off or the start of sustained accumulation. A single large purchase does not, on its own, establish a lasting trend.

The secondary signal is ETH's price reaction in the hours and days after the reported buy. Stablecoin oversight is tightening in parallel, with U.S. regulators indicating that final GENIUS Act rules could arrive by November, a backdrop that could affect how flagged wallets move dollar tokens in the future.

For now, the purchase stands as a notable on-chain data point rather than proof of where Ethereum heads next.

Related coverage: Trump Calls for Passage of the CLARITY Act Alongside Crypto Leaders; Crypto PAC Scores Primary Wins but Loses $2 Million Florida Race.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.