An attacker emptied 1,404 crypto wallets in under two hours, withdrawing about $1.3 million in tokens from affected accounts.

Incident details

The theft occurred after a flaw in the wallet generation process produced predictable seed phrases, which allowed the attacker to derive private keys and access funds.

The vulnerability affected wallets created on iPhone, iPad and in Safari on Mac, exposing a subset of users to unauthorized withdrawals.

Response and containment

To halt further transfers, the network was paused while the team traced stolen assets and coordinated defensive measures with service providers and exchanges.

According to the team, the majority of the stolen tokens were frozen on-chain, and the remaining funds were blocked at an exchange pending investigation.

Key facts

• 1,404 wallets emptied in under two hours.
• $1.3 million in tokens stolen.
• Affected platforms: iPhone, iPad, Safari on Mac.
• Mitigation: network pause, on-chain freezes, exchange blocks.

What remains under review

The team is conducting a forensic analysis to determine the exact scope of predictable seed generation and to issue recommendations for secure wallet creation going forward.

Users who may be affected are advised to avoid creating new wallets with the vulnerable process until an official patch and guidance are published by the project team.