Suji Yan, founder of the Web3 browser extension Mask, has suffered a major security breach, losing $4 million in cryptocurrencies.
The attack, which targeted a public wallet on his phone, took place within an 11-minute window while Yan was away from his device. The stolen funds, including ETH, USDT, WETH, and MASK, were quickly moved to multiple addresses, converted to Ethereum, and redistributed.
Yan, who was celebrating his birthday at the time, suspects a possible private key leak but has not ruled out an offline attack. He has enlisted security experts from SlowMist and ZachXBT to track the stolen assets and is working with law enforcement to investigate the breach.
Unlike recent high-profile hacks, such as the Bybit incident, Yan believes this was not caused by malicious code but rather a breach of trust.
As the crypto community grapples with a series of security breaches, market confidence remains shaken, with Bitcoin’s price struggling to regain momentum. This breach highlights ongoing vulnerabilities within the crypto space, raising concerns about the security of private wallets and the trust placed in personal devices.
Many in the industry are calling for stronger security protocols and more vigilance as cyberattacks on high-profile figures and firms continue to rise.
A former National Crime Agency (NCA) officer has been sentenced to five years and six months in prison after stealing 50 BTC—now worth over £4.4 million—from a criminal investigation he was helping to lead.
The U.S. Securities and Exchange Commission (SEC) has filed emergency enforcement actions against First Liberty Building & Loan, LLC and its founder, Edwin Brant Frost IV, alleging they operated a $140 million Ponzi scheme that spanned more than a decade and defrauded around 300 investors.
A legal clash between Coin Center and the U.S. Treasury Department over sanctions imposed on Tornado Cash has officially come to an end, following a joint decision to dismiss the case.
A sophisticated cyberattack targeting Brazil’s central bank reserve accounts has resulted in the theft of over $140 million (R$800 million), much of which was swiftly funneled through cryptocurrency channels.