In the digital age, data has become the new oil — valuable only when properly extracted and analyzed. Nowhere is this more evident than in the world of blockchain, where on-chain activity reveals the hidden narratives behind market movements, investor behavior, and even pivotal moments in crypto history.
Recently, as the cryptocurrency market has seen a decline in total market capitalization, on-chain metrics have experienced significant shifts. According to OKLink Blockchain Analytics, key indicators such as DeFi total value locked (TVL) and liquidation volumes have hit new highs since the start of 2022 — a clear sign of market stress.
Amid these fluctuations, one group stands out: on-chain whales. These large holders often influence market sentiment with their movements, making them crucial subjects for analysis. In this article, we dive into Ethereum’s top 100 whale addresses, narrowing our focus to over 30 wallets each holding exactly — or nearly — 150,000 ETH. What connects them? Why 150,000? And how do they tie back to one of Ethereum’s most controversial events: The DAO hack?
👉 Discover how whale movements can predict market trends — explore real-time blockchain insights here.
The Mystery of the 150,000 ETH Whales
When examining Ethereum’s top 100 whale addresses and filtering out exchange wallets and smart contracts, an unusual pattern emerges: 32 addresses hold precisely 150,000 ETH (with three holding 150,001 ETH, and the rest exactly 150,000). This consistency is too striking to be coincidental.
Why 150,000? And what links these seemingly independent wallets?
A deeper dive into transaction history reveals a shared origin: nearly all received four separate transfers of 37,500 ETH each in December 2018. Most have remained dormant since — a sign of long-term holding. However, some have moved assets, offering clues to their origins.
Take address 0x0e86, for example. On December 1, 2018, it received four transfers of 37,500 ETH from intermediary addresses 0xe903, 0x113d, 0xf149, and 0x3b1a. Nearly a year and a half later — on May 16, 2022 — the wallet was emptied in a single transaction, sending all 150,000 ETH to Coinbase, then valued at over $300 million.
From acquisition to sale, this whale realized a profit of approximately **$282 million**, assuming an average entry price of $67 at the time of receipt.
But where did these funds originate?
Tracing backward, three of the four sending addresses (0x113d, 0xf149, 0x3b1a) were merely relay points — "bridge" wallets that passed funds from a central source: 0x2de9.
This address distributed 17 separate transfers of 37,500 ETH, which eventually formed multiple 150,000 ETH wallets through intermediary routing. On that same day in December 2018, 0x2de9 received 672,784 ETH from another address: 0xf27d.
That’s where things get even more interesting.
The RSS Connection: Splitting ETH and ETC After the Hard Fork
The transfer from 0xf27d to 0x2de9 was marked as an internal transaction — a type of on-chain activity triggered by smart contract interactions rather than direct user-to-user transfers. More importantly, this transaction originated from a contract known as ReplaySafeSplit (RSS).
👉 Learn how smart contract interactions shape blockchain history — access advanced on-chain tools now.
But what is RSS?
After Ethereum’s hard fork in July 2016 — which split the network into Ethereum (ETH) and Ethereum Classic (ETC) — users who held ETH before the fork found themselves owning equal amounts on both chains. However, spending on one chain risked replay attacks on the other, where the same transaction could be duplicated.
To solve this, the ReplaySafeSplit (RSS) contract was deployed. It allowed users to safely separate their ETH and ETC holdings by sending funds to the contract, which would then forward them to different destination addresses on each chain — eliminating replay risk.
There are two versions: RSS v1 (with over 320,000 transactions) and RSS v2 (over 710,000). The transactions we're analyzing used RSS v1.
In this case, 0xf27d received 672,784 ETH from the RSS contract on October 15, 2016. The sender? Address 0x8bf6.
Tracing Back to Ethereum’s Origins
Address 0x8bf6 accumulated its 672,684 ETH over several weeks before forwarding it to 0xf27d. Its funding sources are diverse — but one stands out: a series of 19 transfers of exactly 10,000 ETH each.
One of those originated from 0x977a, which received funds from 0x8a9e. And 0x8a9e? It was funded by 0xbc46 via the RSS contract.
Here’s where it gets historical: 0xbc46 is linked to Ethereum’s original public sale in 2014. It received 20,000 ETH during the presale and even paid the first transaction fee for 0x8a9e. This places it among the earliest participants in Ethereum’s ecosystem.
This connection suggests that many of today’s 150,000 ETH whales are indirectly tied to Ethereum’s founding era, with assets likely distributed through coordinated post-fork management strategies.
But why did this all happen?
To understand that, we must revisit the event that triggered the hard fork: The DAO hack.
The DAO Hack: Catalyst for Ethereum’s Split
In June 2016, The DAO — a decentralized autonomous organization built on Ethereum — raised over 12 million ETH (then about $150 million) in what was then the largest crowdfunding campaign in history.
Just weeks later, on June 17, 2016, a hacker exploited two vulnerabilities:
- Recursive calling: The attacker repeatedly withdrew funds before the balance was updated.
- Call depth attack: By manipulating call depth limits, the attacker bypassed balance checks.
Over 360 attacks occurred in a short window, draining 3.6 million ETH — roughly one-third of The DAO’s holdings.
At current prices, that sum would exceed $17 billion.
The incident sparked intense debate. Vitalik Buterin proposed a soft fork to blacklist the attacker’s funds, followed by a hard fork to recover them. A community vote followed — and nearly 97% of staked ETH supported the fork.
On July 20, 2016, the hard fork was executed. A new chain emerged — today’s Ethereum (ETH) — with the stolen funds moved to a recovery contract (withdrawDAO). The original chain continued as Ethereum Classic (ETC), upholding immutability.
Thus began the split in philosophy: recovery vs. immutability.
Security Lessons From History
While RSS contracts and The DAO are now relics of the past, their legacy endures. The events of 2016 reshaped how developers approach smart contract security, governance, and decentralization.
Today’s whale addresses — many seeded through post-fork asset management — are living artifacts of that era. Their movements still ripple through markets.
As blockchain evolves, one truth remains: security is non-negotiable. From code audits to wallet hygiene, every layer matters.
👉 Stay ahead of market-moving whale activity with real-time blockchain monitoring tools.
Frequently Asked Questions
Q: Why do so many whale addresses hold exactly 150,000 ETH?
A: These addresses received four equal installments of 37,500 ETH in December 2018, likely distributed from a centralized source post-fork for safekeeping or strategic allocation.
Q: What was The DAO hack?
A: A critical exploit in 2016 where a hacker stole 3.6 million ETH from The DAO project using recursive calling vulnerabilities, leading to Ethereum’s hard fork.
Q: What is RSS and why was it important?
A: ReplaySafeSplit (RSS) was a smart contract designed to help users safely separate their ETH and ETC holdings after the 2016 hard fork, preventing replay attacks across chains.
Q: How did the Ethereum hard fork work?
A: The fork created two chains: Ethereum (ETH), which reversed the hack via consensus, and Ethereum Classic (ETC), which maintained the original ledger without changes.
Q: Are these whale addresses still active?
A: Most remain dormant, but some — like 0x0e86 — have liquidated holdings. Their activity continues to influence market sentiment when detected.
Q: Can I track whale movements myself?
A: Yes — using blockchain explorers and analytics platforms that monitor large transactions and wallet behaviors in real time.
Core Keywords
- Ethereum whales
- On-chain analysis
- The DAO hack
- RSS contract
- Ethereum hard fork
- Blockchain security
- Whale tracking
- Post-fork asset distribution
By understanding the past — from The DAO to RSS to today’s whale networks — we gain insight into how blockchain history shapes current market dynamics.