Security· ★★★· bearish·

NGRAVE notification phishing attack drains $2.65 million from users

  • —About $1.76 million was drained from 21 Bitcoin wallets, the largest share of losses
  • —Proceeds moved through 12 Chainflip swaps and cross-chain bridges before converging on Hyperliquid
  • —Roughly 3,593 XMR1 tokens worth $2.16 million were purchased on 39 accounts
  • —The thefts unfolded over about six hours across 84 wallets
Why it matters: A second hardware-wallet notification exploit in two days (after SecuX) raises doubts about vendors' third-party infrastructure and user trust.
Source: CryptoSlate