Definitive Growth Head Carlos expressed doubts related to the Railway vulnerability
According to Carlos's monitoring, its old hot wallet was emptied early this morning, suspected to be a large-scale attack initiated by "noble.base.eth," and is believed to be related to the Railway vulnerability. Carlos stated that the transfers were signed by its own wallet, and the incident falls under the category of theft due to mnemonic phrase or private key leakage.Within about 70 minutes, 96 wallets were emptied, and all victim wallets exhibited the same pattern. Carlos advised users holding hot wallets to rotate them immediately. The attacker prioritized using Relay as the withdrawal channel, and Relay subsequently stated that it had banned the related wallets.
