Hacking News
Crypto Thieves Hijack Ngrave Alerts and Drain $2.56M
A fake security warning flashed across crypto wallets, sending users to a counterfeit Ngrave website where they were prompted to approve or deny suspicious activity. Users were then asked to enter their 24-word recovery phrase or Perfect Key, allowing thieves to recreate their wallets and drain approximately $2.56 million from 70 wallet addresses across four networks. The thieves obtained unauthorized access to the notification system six days before the fraudulent alerts appeared, and automated scripts emptied compromised accounts within minutes.