Hacking News
Ngrave Hardware Wallet Victims Lose $2.56M in Cryptocurrencies
Hackers exploited a third-party notification provider in Ngrave hardware wallets, tricking customers into typing their 24-word recovery phrases into fake security pop-ups. The attackers stole $2.56 million from 70 wallet addresses across four networks. Ngrave detected the malicious alerts within a minute but could not prevent the theft, which occurred within six minutes of the first wallet being drained. The attackers used the compromised access to launder the funds through exchanges and bridges, with Bitcoin and XRP being the primary stolen cryptocurrencies. Ngrave replaced compromised keys and implemented additional security measures to prevent future incidents.