Blockchain analytics firm Bitquery traced approximately $2.65 million in suspected losses across 84 cryptocurrency wallets following an Oct. 17 phishing attack targeting NGRAVE users. According to NS3.AI, NGRAVE said attackers compromised a third-party service used to send notifications through its LIQUID companion app.

Fraudulent alerts directed users to a website that requested credentials, which attackers used to recreate wallets without accessing the hardware devices. Bitquery traced $2.16 million in suspected proceeds to purchases of XMR1 tokens through 39 Hyperliquid accounts. Other phishing attacks may have affected some of the 84 wallets.