If some wallets are able to send funds to this address, then the corresponding checksum must be valid — which implies that someone has access to the correct private-public key pair. It’s virtually impossible to blindly create a vanity address with a matching checksum by chance. Interesting development -$48M Israeli-Linked Hack. Could these two events be related?