Preliminary Report: Cyber Attack on WazirX Multisig Wallet
2024-07-18 • Wazir X •
https://wazirx.com/blog/preliminary-report-cyber-attack-on-wazirx-multisig-wallet/
WazirX reported a cyber attack against one multisig wallet that caused losses exceeding $230 million. The wallet used Liminal’s custody and wallet infrastructure and required approvals from three WazirX signatories plus Liminal, with whitelisted destination controls in place. WazirX said the attack involved a discrepancy between the data shown in Liminal’s interface and the transaction contents that were actually signed, and it suspected the payload was replaced to transfer wallet control to the attacker. The affected wallet address was 0x27fD43BABfbe83a81d14665b1a6fB8030A60C9b4.