Rekt News describes a January 2025 compromise of Phemex hot wallets that drained roughly $73 million across more than a dozen blockchains. The attacker moved through wallets on Ethereum, Solana, XRP, Bitcoin, BSC, Sui, Base, Tron, Litecoin, Avalanche, Arbitrum, and other networks while Phemex suspended withdrawals and said cold wallets remained safe. Early analysis cited an access-control or key-management failure that gave the attacker broad hot-wallet control, making the incident a major centralized-exchange security failure rather than a DPRK-attributed case in the provided source.