Bullish
Private Key Leak Suspected in $25M Theft, Victim Previously Lost $24M
09:11
Two wallets drained of $25M in 15 minutes via suspected key leak. Funds moved to DAI and ETH. Victim previously lost $24M to phishing in 2023.
Woofun AI reports that a cryptocurrency holder suffered approximately $25 million in losses after two wallets were emptied within 15 minutes, likely due to a private key leak. The addresses transferred all assets, including DAI, WBTC, aUSDC, LDO, sUSDe, and native ETH, to a new address. Within an hour, the stolen funds were converted: 20 million DAI was sent elsewhere, while roughly 3,000 ETH remained in the consolidated address.
This incident is distinct from typical phishing approval scams. The victim's address previously lost 4,851 rETH and 9,579 stETH, valued at about $24 million, in September 2023 after signing a phishing-related increaseAllowance transaction. At that time, attackers returned approximately 90% of the stolen funds.
WOOFUN AI
Impact Assessment · Quick Read
The recurrence of high-value losses for the same entity highlights persistent security vulnerabilities despite past incidents. The shift from phishing approvals to suspected private key exposure suggests attackers may be leveraging compromised credentials rather than social engineering. This pattern underscores the critical need for multi-signature custody solutions for large holders to mitigate single-point-of-failure risks.
Generated by WOOFUN AI · For reference only, not investment advice
Comments
No comments yet.