Yet another case of “private keys not being protected, and assets disappearing first.”
According to Wu’s report citing Specter monitoring, an unknown victim is suspected to have lost more than $4.3 million due to a private-key leak, involving EVM chains, Tron, and Bitcoin. The attacker has emptied more than 145 Ethereum addresses; most of those addresses held USDC. After the related funds were exchanged into ETH, they were bridged and transferred cross-chain, and then consolidated with Bitcoin stolen from at least five addresses.
The core risk here isn’t whether a single token goes up or down, but how private keys, seed phrases, and multi-chain assets are managed. One observation is that the looser the practices around old-wallet authorizations, hot-wallet backups, and cloud storage, the larger the exposure. Another observation is that even if large assets are dispersed across chains, it may not be enough to stop automated sweeps unless cold storage isolation is implemented.
Would you rather first investigate authorizations on old wallets, or migrate large assets to new addresses for cold storage?
Figure 1: Loss from an unknown private-key leak exceeding $4.3 million · Partial screenshot from the source page
Image source: https://www.wublock123.com/news/specter-private-key-leak-victim-loss-4-3m-usd-68769
According to Wu’s report citing Specter monitoring, an unknown victim is suspected to have lost more than $4.3 million due to a private-key leak, involving EVM chains, Tron, and Bitcoin. The attacker has emptied more than 145 Ethereum addresses; most of those addresses held USDC. After the related funds were exchanged into ETH, they were bridged and transferred cross-chain, and then consolidated with Bitcoin stolen from at least five addresses.
The core risk here isn’t whether a single token goes up or down, but how private keys, seed phrases, and multi-chain assets are managed. One observation is that the looser the practices around old-wallet authorizations, hot-wallet backups, and cloud storage, the larger the exposure. Another observation is that even if large assets are dispersed across chains, it may not be enough to stop automated sweeps unless cold storage isolation is implemented.
Would you rather first investigate authorizations on old wallets, or migrate large assets to new addresses for cold storage?
Figure 1: Loss from an unknown private-key leak exceeding $4.3 million · Partial screenshot from the source page
Image source: https://www.wublock123.com/news/specter-private-key-leak-victim-loss-4-3m-usd-68769
