NGRAVE says a third-party notification provider used for LIQUID app alerts was compromised on October 17, allowing attackers to send a deceptive warning to customers. The message directed victims to a website imitating NGRAVE pages, where they entered their recovery phrase or Perfect Key. The company estimated that approximately $2.56 million was stolen from about 70 wallet addresses across four networks, including $1.77 million in Bitcoin, $454,000 in XRP, $316,000 in Ethereum assets and $18,000 in Stellar. NGRAVE described the total as a minimum and said the attack did not reveal any failure of the cryptography of its ZERO hardware wallet, but instead exploited trust in an apparently legitimate alert. The notification channel was disabled and its keys replaced.
Source: Read the original article
