NGRAVE Traces $2.56 Million in Phished Crypto Assets to 12 Recipient Addresses

Hardware wallet maker NGRAVE traced $2.56 million in stolen cryptocurrency from roughly 70 victim wallets into 12 primary recipient addresses. The breach occurred on October 17 after attackers compromised an external notification provider for NGRAVE's LIQUID companion app, sending fake alerts that tricked users into entering seed phrases on a phishing site. Stolen funds included $1.77 million in Bitcoin, $454,000 in XRP, $316,000 in Ethereum-based tokens, and $18,000 in Stellar. NGRAVE confirmed its ZERO hardware devices were not breached and rotated compromised access credentials.