NGRAVE put losses from an Oct. 17 phishing attack targeting users of its LIQUID wallet app at about $2.56 million, as it continued reviewing customer reports and activity on other networks.
NGRAVE pairs LIQUID with its ZERO hardware wallet. The company traced the stolen Bitcoin (BTC) to 12 addresses and put its value at about $1.77 million. XRP losses were $454,000 across 54 transfers, while Ethereum-based assets accounted for about $316,000.
The estimate covered roughly 70 wallet addresses, using prices as of Oct. 17. NGRAVE said its assessment was continuing as it checked other networks and customer reports.
Attackers accessed an outside provider used to send LIQUID notifications, the company said. The bogus notice identified a Pixel 9 in Moscow as a device newly linked to a user's portfolio. It sent recipients to a fake NGRAVE website.
The page asked visitors for a 24-word recovery phrase or Perfect Key. NGRAVE said either credential could restore a wallet and move its holdings without the ZERO device, so users who supplied the information could lose access to their crypto.
NGRAVE spotted the alert within about a minute. The first wallet had been emptied about six minutes after the notice was sent. By 6:45 p.m. ET (22:45 UTC), the company had taken its notification system offline.
The company said attackers did not reach its ZERO hardware wallets, the private keys held on them or LIQUID code. It replaced the affected access keys and planned tighter controls on notifications. Its review of other networks and customer reports was still underway.
