Hackers hijacked NGRAVE’s wallet notifications in a phishing attack estimated at $2.65 million in cryptocurrency losses. The October 17 attack affected 84 wallets, draining approximately $1.76 million in Bitcoin from 21 wallets. Stolen funds were routed through Chainflip swaps and cross-chain bridges before converging on 39 Hyperliquid accounts, where approximately 3,593 XMR1 tokens worth $2.16 million were purchased. NGRAVE confirmed that attackers compromised a third-party service responsible for delivering LIQUID push notifications. The incident follows a series of attacks against hardware wallet manufacturers, after vulnerabilities at Coldcard (approximately $116 million stolen) and Ledger (more than $90 million linked to malicious modifications).
Source: Read the original article
