Hot wallet thefts are nothing new. What is unusual is that 96 wallets were drained using the same method within 70 minutes.
Carlos, head of growth at Definitive, confirmed that his old hot wallet was stolen early this morning. He believes his private key signed the transfers, meaning the key or seed phrase may have been compromised. He suspects the attack was carried out by noble.base.eth and may be related to a Railway vulnerability. A total of 96 wallets were drained on mainnet over roughly 70 minutes starting at 16:11 UTC, with other chains also affected.
Observation 1: This was not an isolated case of one person’s wallet being stolen. Multiple wallets were looted using the same method in a short period, pointing to an issue with signing or key management. Observation 2: Addresses that have connected wallets to or authorized them with related products such as Railway and Definitive can use revoke tools to check for and revoke suspicious approvals. Move large holdings to a cold wallet first.
Would you rather check your approvals first, or move large holdings to a cold wallet?
Source: PANews
Image 1: Definitive executive’s hot wallet stolen; 96 wallets drained within 70 minutes · Screenshot of the source page
Image source: https://www.panewslab.com/zh/articles/01a1af3d-1128-75d3-b53c-ebc0a3b9314e
Carlos, head of growth at Definitive, confirmed that his old hot wallet was stolen early this morning. He believes his private key signed the transfers, meaning the key or seed phrase may have been compromised. He suspects the attack was carried out by noble.base.eth and may be related to a Railway vulnerability. A total of 96 wallets were drained on mainnet over roughly 70 minutes starting at 16:11 UTC, with other chains also affected.
Observation 1: This was not an isolated case of one person’s wallet being stolen. Multiple wallets were looted using the same method in a short period, pointing to an issue with signing or key management. Observation 2: Addresses that have connected wallets to or authorized them with related products such as Railway and Definitive can use revoke tools to check for and revoke suspicious approvals. Move large holdings to a cold wallet first.
Would you rather check your approvals first, or move large holdings to a cold wallet?
Source: PANews
Image 1: Definitive executive’s hot wallet stolen; 96 wallets drained within 70 minutes · Screenshot of the source page
Image source: https://www.panewslab.com/zh/articles/01a1af3d-1128-75d3-b53c-ebc0a3b9314e
