{"id":574608,"date":"2026-10-20T15:00:51","date_gmt":"2026-10-20T14:00:51","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=574608"},"modified":"2026-10-20T10:38:39","modified_gmt":"2026-10-20T09:38:39","slug":"crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/","title":{"rendered":"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack"},"content":{"rendered":"<p>Hackers routed $2.16 million in suspected NGRAVE phishing proceeds to Hyperliquid after hijacking the wallet maker's app notifications.<\/p>\n<p>Blockchain analytics firm Bitquery <a href=\"https:\/\/bitquery.io\/investigations\/ngrave-liquid-hack\">traced<\/a> approximately $2.65 million in suspected losses across 84 cryptocurrency wallets following the Oct. 17 attack, which exploited security notifications sent through NGRAVE's LIQUID companion app.<\/p>\n<p>The thefts occurred over roughly six hours across Bitcoin, <a href=\"https:\/\/cryptoslate.com\/coins\/xrp\/\">XRP<\/a>, <a href=\"https:\/\/cryptoslate.com\/coins\/ethereum\/\">Ethereum<\/a>, <a href=\"https:\/\/cryptoslate.com\/coins\/solana\/\">Solana<\/a>, <a href=\"https:\/\/cryptoslate.com\/coins\/dogecoin\/\">Dogecoin<\/a> and Stellar. <a href=\"https:\/\/cryptoslate.com\/coins\/bitcoin\/\">Bitcoin<\/a> accounted for the largest share, with attackers draining about $1.76 million from 21 wallets before moving the proceeds across multiple blockchains.<\/p>\n<p>Bitquery traced much of the stolen Bitcoin through 12 Chainflip swaps, while Ethereum and Solana proceeds passed through bridges before converging on 39 Hyperliquid accounts.<\/p>\n<p>The accounts then purchased about 3,593 XMR1 tokens, a cryptocurrency that tracks the price of privacy-focused <a href=\"https:\/\/cryptoslate.com\/coins\/monero\/\">Monero<\/a>, for $2.16 million.<\/p>\n<p>As of Bitquery's latest recorded check on Oct. 19, the tokens had neither been sold nor withdrawn. Their combined value was about $2.12 million, leaving a substantial portion of the suspected proceeds concentrated in identifiable accounts.<\/p>\n<p><a href=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-2041aaa1-fb75-4a49-803c-092d69c089a5.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter shoggoth-infographic shoggoth-infographic-portrait wp-image-574612\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-2041aaa1-fb75-4a49-803c-092d69c089a5.png\" alt=\"Bitquery's suspected NGRAVE phishing money trail: Bitcoin, Ethereum and Solana proceeds reached 39 Hyperliquid accounts buying XMR1; other onward routes remain unproven. Holdings were checked at 09:00 UTC on October 19, 2026.\" width=\"720\" height=\"900\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-2041aaa1-fb75-4a49-803c-092d69c089a5.png 1122w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-2041aaa1-fb75-4a49-803c-092d69c089a5-240x300.png 240w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-2041aaa1-fb75-4a49-803c-092d69c089a5-819x1024.png 819w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/exec-2041aaa1-fb75-4a49-803c-092d69c089a5-768x960.png 768w\" sizes=\"(max-width: 720px) 100vw, 720px\" \/><\/a><\/p>\n<p>The investigation identified the suspected victims through transaction patterns and reported losses, although other phishing attacks may have affected some of the 84 wallets.<\/p>\n<p>In an <a href=\"https:\/\/www.ngrave.io\/en\/blog\/incident-report-fake-liquid-security-alert-17-october\">Oct. 19 incident report<\/a>, NGRAVE confirmed that attackers compromised access to a third-party service responsible for delivering LIQUID push notifications.<\/p>\n<p>The fraudulent messages warned users that their cryptocurrency portfolios had been synchronized with a Pixel 9 device in Moscow. After the alerts, victims were directed to a website that asked for their recovery phrases or NGRAVE Perfect Keys.<\/p>\n<p>Those credentials let attackers recreate affected wallets and transfer assets without accessing the ZERO hardware devices, which NGRAVE said kept private keys offline.<\/p>\n<h2>Crypto wallet makers face mounting security threats<\/h2>\n<p>The incident follows a similar phishing campaign against SecuX users on Oct. 16, raising concerns about attackers exploiting trusted communication channels to target hardware wallet customers.<\/p>\n<p>Nick Percoco, Kraken's chief security officer, <a href=\"https:\/\/x.com\/c7five\/status\/2111786812825911801\">highlighted<\/a> the similarities between the two incidents, describing NGRAVE as the second wallet manufacturer in two days whose application notifications were used to steal recovery phrases.<\/p>\n<p>The repeated attacks add to a difficult year for hardware wallet manufacturers, whose security models have faced increasingly sophisticated threats.<\/p>\n<p>In July, a firmware <a href=\"https:\/\/cryptoslate.com\/coldcard-crisis-hits-130-million-proving-not-your-keys-is-meaningless-if-you-trust-a-single-device-to-generate-them\/\">vulnerability affecting Coldcard devices<\/a> weakened the randomness used to generate wallet recovery phrases, allowing attackers to reconstruct private keys. Blockchain intelligence firm <a href=\"https:\/\/www.trmlabs.com\/resources\/blog\/the-largest-hardware-wallet-exploit-of-2026-inside-the-usd-116-million-coldcard-hack\">TRM Labs estimated<\/a> that attackers stole about $116 million in Bitcoin.<\/p>\n<p>More recently, Ledger disclosed that criminals\u00a0<span style=\"box-sizing: border-box; margin: 0px; padding: 0px;\"><a href=\"https:\/\/cryptoslate.com\/ledger-wants-customers-to-trust-its-new-849-device-as-criminals-compromise-existing-wallets\/\" target=\"_blank\" rel=\"noopener\">modified hardware wallets<\/a> distributed through resellers, installing hidden components that could capture<\/span> recovery phrases. Investigators linked the operation to suspected cryptocurrency thefts totaling more than $90 million.<\/p>\n\n<div class=\"cs-article-embed\">\n    <a href=\"https:\/\/cryptoslate.com\/who-handled-your-wallet-before-you-did\/\" class=\"cs-article-embed__link\">\n        <div class=\"cs-article-embed__body\">\n            <span class=\"cs-article-embed__related-reading\">Related Reading<\/span>\n            <h3 class=\"cs-article-embed__title\">Who opened your crypto wallet before it reached your hands?<\/h3>\n        <\/div>\n        <span class=\"cs-article-embed__arrow\" aria-hidden=\"true\">\n            <i class=\"fa-light fa-arrow-up-right\"><\/i>\n        <\/span>\n    <\/a>\n<\/div>\n\n<p>The incidents exposed weaknesses across hardware wallet security, from software vulnerabilities and compromised distribution channels to fraudulent messages delivered through legitimate apps.<\/p>\n<p>For manufacturers, the repeated breaches are increasing pressure to strengthen security beyond the devices themselves, particularly across third-party services and customer-facing infrastructure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Bitquery follows funds into XMR1 purchases on Hyperliquid, but cannot confirm every wallet belonged to an NGRAVE user.<\/p>\n","protected":false},"author":720,"featured_media":574632,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[77968,16041,77921,60206],"tags":[81073,76769,72190,77044,75380,78586,72399],"prediction_market_topic":[],"post_folder":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.9 (Yoast SEO v21.9.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack<\/title>\n<meta name=\"description\" content=\"Bitquery traced $2.65 million in suspected NGRAVE phishing losses across 84 wallets after attackers exploited trusted security alerts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack\" \/>\n<meta property=\"og:description\" content=\"Bitquery traced $2.65 million in suspected NGRAVE phishing losses across 84 wallets after attackers exploited trusted security alerts.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/\" \/>\n<meta property=\"og:site_name\" content=\"CryptoSlate\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-20T14:00:51+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-20T09:38:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/hyperliquid-xmr1-fund-tracing.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Oluwapelumi Adejumo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:site\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oluwapelumi Adejumo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/\"},\"author\":{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#person\",\"name\":\"Oluwapelumi Adejumo\",\"url\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/\"},\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#authorimage\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-300x300.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-300x300.jpg\",\"caption\":\"Oluwapelumi Adejumo\"},\"jobTitle\":\"Senior Reporter\",\"description\":\"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.\",\"worksFor\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"sameAs\":[\"https:\/\/x.com\/hardeyjumoh\",\"https:\/\/www.linkedin.com\/in\/oluwapelumi-adejumo\",\"https:\/\/muckrack.com\/oluwapelumi-adejumo\"]},\"headline\":\"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack\",\"datePublished\":\"2026-10-20T14:00:51+00:00\",\"dateModified\":\"2026-10-20T14:00:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/\"},\"wordCount\":478,\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"keywords\":[\"Bitcoin\",\"BTC\",\"ethereum\",\"Monero\",\"Solana\",\"XMR\",\"xrp\"],\"articleSection\":[\"Featured\",\"Hacks\",\"Research\",\"Wallets\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/\",\"url\":\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/\",\"name\":\"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/#website\"},\"datePublished\":\"2026-10-20T14:00:51+00:00\",\"dateModified\":\"2026-10-20T14:00:51+00:00\",\"description\":\"Bitquery traced $2.65 million in suspected NGRAVE phishing losses across 84 wallets after attackers exploited trusted security alerts.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptoslate.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptoslate.com\/#website\",\"url\":\"https:\/\/cryptoslate.com\/\",\"name\":\"CryptoSlate\",\"description\":\"Cryptocurrency News and Real-time Coin Data\",\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"NewsMediaOrganization\",\"@id\":\"https:\/\/cryptoslate.com\/#organization\",\"name\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"CryptoSlate\"},\"image\":{\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/cryptoslate\",\"https:\/\/www.instagram.com\/cryptoslate\",\"https:\/\/www.linkedin.com\/company\/cryptoslate\",\"https:\/\/www.youtube.com\/c\/cryptoslate\",\"https:\/\/t.me\/cryptoslatenews\",\"https:\/\/www.crunchbase.com\/organization\/cryptoslate\",\"https:\/\/iq.wiki\/wiki\/cryptoslate\",\"https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ\",\"https:\/\/muckrack.com\/media-outlet\/cryptoslate\",\"https:\/\/www.tiktok.com\/@cryptoslatenews\"],\"publishingPrinciples\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles\",\"ownershipFundingInfo\":\"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/\",\"correctionsPolicy\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback\",\"ethicsPolicy\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles\",\"foundingDate\":\"2017-08-04\",\"founder\":[{\"@type\":\"Person\",\"name\":\"Nate Whitehill\"},{\"@type\":\"Person\",\"name\":\"Matthew Blancarte\"}],\"contactPoint\":[{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\/\/cryptoslate.com\/contact\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"sales\",\"url\":\"https:\/\/cryptoslate.com\/contact\/?topic=advertising#contact-form\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"newsroom\",\"url\":\"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback\",\"email\":\"tips@cryptoslate.com\",\"availableLanguage\":\"en-US\"}],\"masthead\":\"https:\/\/cryptoslate.com\/about\/#masthead\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6\",\"name\":\"Oluwapelumi Adejumo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-150x150.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-150x150.jpg\",\"caption\":\"Oluwapelumi Adejumo\"},\"description\":\"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.\",\"jobTitle\":\"Reporter\",\"worksFor\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack","description":"Bitquery traced $2.65 million in suspected NGRAVE phishing losses across 84 wallets after attackers exploited trusted security alerts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/","og_locale":"en_US","og_type":"article","og_title":"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack","og_description":"Bitquery traced $2.65 million in suspected NGRAVE phishing losses across 84 wallets after attackers exploited trusted security alerts.","og_url":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/","og_site_name":"CryptoSlate","article_published_time":"2026-10-20T14:00:51+00:00","article_modified_time":"2026-10-20T09:38:39+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/hyperliquid-xmr1-fund-tracing.webp","type":"image\/webp"}],"author":"Oluwapelumi Adejumo","twitter_card":"summary_large_image","twitter_creator":"@cryptoslate","twitter_site":"@cryptoslate","twitter_misc":{"Written by":"Oluwapelumi Adejumo","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/#article","isPartOf":{"@id":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/"},"author":{"@type":"Person","@id":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#person","name":"Oluwapelumi Adejumo","url":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/"},"image":{"@type":"ImageObject","@id":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/#authorimage","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-300x300.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-300x300.jpg","caption":"Oluwapelumi Adejumo"},"jobTitle":"Senior Reporter","description":"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.","worksFor":{"@id":"https:\/\/cryptoslate.com\/#organization"},"sameAs":["https:\/\/x.com\/hardeyjumoh","https:\/\/www.linkedin.com\/in\/oluwapelumi-adejumo","https:\/\/muckrack.com\/oluwapelumi-adejumo"]},"headline":"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack","datePublished":"2026-10-20T14:00:51+00:00","dateModified":"2026-10-20T14:00:51+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/"},"wordCount":478,"publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"keywords":["Bitcoin","BTC","ethereum","Monero","Solana","XMR","xrp"],"articleSection":["Featured","Hacks","Research","Wallets"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/cryptoslate.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/","url":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/","name":"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack","isPartOf":{"@id":"https:\/\/cryptoslate.com\/#website"},"datePublished":"2026-10-20T14:00:51+00:00","dateModified":"2026-10-20T14:00:51+00:00","description":"Bitquery traced $2.65 million in suspected NGRAVE phishing losses across 84 wallets after attackers exploited trusted security alerts.","breadcrumb":{"@id":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cryptoslate.com\/crypto-wallet-security-crisis-deepens-as-ngrave-users-face-2-65-million-phishing-attack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptoslate.com\/"},{"@type":"ListItem","position":2,"name":"Crypto wallet security crisis deepens as NGRAVE users face $2.65 million phishing attack"}]},{"@type":"WebSite","@id":"https:\/\/cryptoslate.com\/#website","url":"https:\/\/cryptoslate.com\/","name":"CryptoSlate","description":"Cryptocurrency News and Real-time Coin Data","publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"inLanguage":"en-US"},{"@type":"NewsMediaOrganization","@id":"https:\/\/cryptoslate.com\/#organization","name":"CryptoSlate","url":"https:\/\/cryptoslate.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","width":1000,"height":1000,"caption":"CryptoSlate"},"image":{"@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/cryptoslate","https:\/\/www.instagram.com\/cryptoslate","https:\/\/www.linkedin.com\/company\/cryptoslate","https:\/\/www.youtube.com\/c\/cryptoslate","https:\/\/t.me\/cryptoslatenews","https:\/\/www.crunchbase.com\/organization\/cryptoslate","https:\/\/iq.wiki\/wiki\/cryptoslate","https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ","https:\/\/muckrack.com\/media-outlet\/cryptoslate","https:\/\/www.tiktok.com\/@cryptoslatenews"],"publishingPrinciples":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles","ownershipFundingInfo":"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/","correctionsPolicy":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback","ethicsPolicy":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#editorial-principles","foundingDate":"2017-08-04","founder":[{"@type":"Person","name":"Nate Whitehill"},{"@type":"Person","name":"Matthew Blancarte"}],"contactPoint":[{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/cryptoslate.com\/contact\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"sales","url":"https:\/\/cryptoslate.com\/contact\/?topic=advertising#contact-form","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"newsroom","url":"https:\/\/cryptoslate.com\/disclaimers\/editorial-policy\/#corrections-feedback","email":"tips@cryptoslate.com","availableLanguage":"en-US"}],"masthead":"https:\/\/cryptoslate.com\/about\/#masthead"},{"@type":"Person","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6","name":"Oluwapelumi Adejumo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-150x150.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/10\/profile-oluwapelumi-adejumo-1-150x150.jpg","caption":"Oluwapelumi Adejumo"},"description":"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.","jobTitle":"Reporter","worksFor":"CryptoSlate","url":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/574608"}],"collection":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/users\/720"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/comments?post=574608"}],"version-history":[{"count":3,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/574608\/revisions"}],"predecessor-version":[{"id":574674,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/574608\/revisions\/574674"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media\/574632"}],"wp:attachment":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media?parent=574608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/categories?post=574608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/tags?post=574608"},{"taxonomy":"prediction_market_topic","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/prediction_market_topic?post=574608"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/post_folder?post=574608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}