Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack
Summary
Attackers used compromised third-party push notifications in NGRAVE’s LIQUID app to direct users to a phishing site that stole recovery credentials. Bitquery traced about $2.65 million in suspected losses from 84 wallets across six cryptocurrencies. Much of the funds moved through swaps and bridges into 39 Hyperliquid accounts, which bought about $2.16 million of XMR1 tokens; the tokens remained there as of Oct. 19. NGRAVE said its ZERO hardware wallets’ offline keys were not accessed. The incident followed a similar campaign targeting SecuX users and adds to wider concerns about risks in wallet makers’ apps, services and supply chains.
