An unknown wallet described as belonging to a hacker spent $38.53 million buying ETH as Ethereum’s price rose during a broader market rally, drawing attention from on-chain watchers and traders monitoring large flows.

What Happened in the $38.53 Million ETH Purchase

A wallet labeled as an unknown hacker spent $38.53 million to buy ETH.

The purchase took place while ETH was trading higher during a wider crypto market rally.

The buyer’s identity, motive, and source of funds have not been established in the available reporting.

The transaction was flagged in on-chain monitoring shared through Lookonchain’s tracking feed, which described the buyer only as an unknown hacker. Lookonchain is one of several analytics services that monitor public blockchain data and surface large wallet movements; because blockchain transactions are publicly visible, buys of this size can be spotted and shared as they occur. No verified identity, wallet history, or attribution beyond that label is available. The relevant source post is here: https://x.com/lookonchain/status/2090271392340299869, and Lookonchain’s feed is available at

Labels such as “hacker” in on-chain feeds are assigned by the tracking platforms themselves, based on wallet activity and public reporting, and analysts generally treat them as leads rather than confirmed attribution — one reason the buyer remains officially unidentified.

The buy landed as ETH traded higher and the broader crypto market rallied. That is the extent of the confirmed market context in the current reporting; no specific price level, percentage move, or volume figure is verified.

Why Traders and Security Watchers Are Following the Wallet

ETH is the native asset of Ethereum, the second-largest cryptocurrency by market value, so a single transaction in the tens of millions of dollars stands out on a public ledger and is large enough to draw attention from market participants who track substantial spot buying during upward moves, since concentrated demand can influence sentiment.

The hacker label also adds a security-monitoring dimension. On-chain analysts often watch wallets tied to illicit activity, a concern underscored by reporting on AI-assisted crypto phishing and wallet-targeting campaigns, and this address may attract the same scrutiny. For addresses like this, the standard approach is to watch for follow-on transfers, deposits to exchanges, or movement through mixing services, since those steps can clarify where funds originate and where they are headed.

One large buy does not establish a sustained trend. Without verified follow-on transactions or an established source of funds, the event remains a single data point rather than evidence of a broader shift in flows.

For now, the story is limited to what the on-chain report shows: a wallet flagged as a hacker deploying tens of millions of dollars into ETH during a rally. Any conclusions about intent or what may come next would go beyond the confirmed transaction details.

Related coverage referenced in the source includes Bloomberg’s report on OKX restricting Claude use for Hong Kong employees, Coinbase’s Base launching a $100,000 startup accelerator for AI agent projects, coverage of Bitcoin rising above $68,000 amid $1.31 billion in one-hour liquidations, reporting on AI crypto phishing and wallet-targeting campaigns, and a note on ARK Invest buying 3iQ’s Solana staking ETF.

Additional source references: source document 1.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.