The hardware wallet wasn’t hacked. The people were.
On October 17, NGRAVE’s LIQUID App displayed a fake “security alert.” Users followed its instructions and handed over their recovery phrases and Perfect Keys. Six hours later, $2.56 million had vanished—$XRP , $XLM , and $DOGE were all affected. The company traced the incident to 70 drained addresses, while Bitquery estimated losses of $2.65 million across 84 wallets.
The company stressed that its ZERO hardware wallets and private keys were not compromised. Users had handed over their funds themselves—the attackers used a fake website. Suspicious access may have started as early as October 11, but the incident wasn’t disclosed until the 19th.
Phishing doesn’t attack the castle; it targets the people guarding it. Remember this: any pop-up asking you to enter your recovery phrase is fake, no matter how official it looks. Your recovery phrase belongs only on paper and in your mind—never on a keyboard.
#安全 #钱包安全 #Phishing
On October 17, NGRAVE’s LIQUID App displayed a fake “security alert.” Users followed its instructions and handed over their recovery phrases and Perfect Keys. Six hours later, $2.56 million had vanished—$XRP , $XLM , and $DOGE were all affected. The company traced the incident to 70 drained addresses, while Bitquery estimated losses of $2.65 million across 84 wallets.
The company stressed that its ZERO hardware wallets and private keys were not compromised. Users had handed over their funds themselves—the attackers used a fake website. Suspicious access may have started as early as October 11, but the incident wasn’t disclosed until the 19th.
Phishing doesn’t attack the castle; it targets the people guarding it. Remember this: any pop-up asking you to enter your recovery phrase is fake, no matter how official it looks. Your recovery phrase belongs only on paper and in your mind—never on a keyboard.
#安全 #钱包安全 #Phishing