Can a fake alert trick you into giving up your recovery phrase?
On October 19, NGRAVE disclosed that attackers had hijacked a third-party notification service used by the LIQUID companion app and sent out fake security alerts. About 70 wallet addresses across 4 chains were drained of roughly $2.56 million.
First, let’s break down the losses. Bitcoin: $BTC , about $1.77 million; XRP: $XRP , about $454,000; Ethereum: $ETH , about $316,000; and about $18,000 on another chain. Automated scripts carried out the transfers in just a few minutes.
The ZERO hardware wallet and private keys were not directly compromised. People clicked through to phishing websites and handed over their 24-word recovery phrase or Perfect Key themselves. Unauthorized access may have begun as early as October 11: the attackers first obtained an access key, then exchanged it for one with greater privileges. The fake alerts weren’t sent until October 17.
$BTC is currently priced at 82924.01, up 1.08% in 24 hours. I can’t match this price movement to the stolen funds. The device wasn’t breached, but the companion app’s notifications were hijacked—and once credentials are handed over, there’s no stopping it.
#安全事件 #钓鱼
On October 19, NGRAVE disclosed that attackers had hijacked a third-party notification service used by the LIQUID companion app and sent out fake security alerts. About 70 wallet addresses across 4 chains were drained of roughly $2.56 million.
First, let’s break down the losses. Bitcoin: $BTC , about $1.77 million; XRP: $XRP , about $454,000; Ethereum: $ETH , about $316,000; and about $18,000 on another chain. Automated scripts carried out the transfers in just a few minutes.
The ZERO hardware wallet and private keys were not directly compromised. People clicked through to phishing websites and handed over their 24-word recovery phrase or Perfect Key themselves. Unauthorized access may have begun as early as October 11: the attackers first obtained an access key, then exchanged it for one with greater privileges. The fake alerts weren’t sent until October 17.
$BTC is currently priced at 82924.01, up 1.08% in 24 hours. I can’t match this price movement to the stolen funds. The device wasn’t breached, but the companion app’s notifications were hijacked—and once credentials are handed over, there’s no stopping it.
#安全事件 #钓鱼