Ngrave said attackers used a hijacked third-party notification provider to send fake security alerts to its LIQUID app customers on Oct. 17. The alerts led to a counterfeit site that asked users for their recovery credentials. Ngrave’s investigation traced about $2.56 million stolen from 70 wallet addresses across four blockchain networks.
Ngrave said its ZERO hardware wallets and private keys were not compromised; the thefts followed customers surrendering their credentials. The company said unauthorized access may have begun on Oct. 11 and acknowledged possible exposure of device information, wallet activity, IP addresses and approximate locations. It has replaced compromised keys and urged affected customers to set up new wallets, while its investigation continues.
