Hot Wallet Drained, Definitive Growth Lead Carlos Says Incident Possibly Linked to Railway Vulnerability
According to monitoring by Carlos, his old hot wallet was drained in the early hours of today, suspected to be part of a large-scale attack initiated by "noble.base.eth," and he suspects it may be related to a Railway vulnerability. Carlos stated that the transfers were signed by his own wallet, and the incident belongs to the category of theft via mnemonic phrase or private key leakage. Approximately 96 wallets were drained within about 70 minutes, with all victim wallets exhibiting the same pattern. Carlos advised users holding hot wallets to rotate them immediately. The attacker preferentially used Relay as an exit channel, and Relay subsequently stated that it had banned the relevant wallets.
