[Chain News] Another painful major case. A user named Babur just publicly shared his heartbreaking story—$27 million in crypto assets are gone just like that.
Looking at the on-chain data, the main victims this time are two wallets: the Solana address starting with 91xu, and the Ethereum Safe multisig address 0xD2. Just the two largest transfers alone wiped out over $18 million—it’s heartbreaking just to see it.
The hackers didn’t mess around either: they used the 71fM address on Solana and the 0x4f address on Ethereum. To make matters worse, they even played with cross-chain transfers, and some of the stolen funds have already been bridged to the Ethereum network.
The worst part is how it happened—the computer was compromised. Reportedly, Babur clicked and ran a malicious file, and the private keys were exposed just like that. Even more outrageous, it’s possible that both signing private keys for the Safe multisig were stored on the same computer—definitely questionable security awareness.
This incident proves once again: store hardware wallets separately, don’t randomly click on files, and never keep multisig private keys together. A lesson learned the hard way.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
14 Likes
Reward
14
5
Repost
Share
Comment
0/400
SnapshotStriker
· 12-06 04:50
Storing all the private keys on one computer? That's just asking for trouble.
27 million gone just like that, Babur must be devastated.
Moving stolen funds across chains, this hacker is seriously ruthless.
Getting malware on your computer is such an old trick, can't believe people still fall for it.
Keeping both Safe multi-sig private keys on the same device, that's some seriously lacking risk awareness...
Reading this case makes me glad I don't have that much crypto.
One malicious file and all your assets are gone, that's brutal.
Both chains got laundered, these techniques are seriously professional.
View OriginalReply0
SolidityNewbie
· 12-05 14:46
I'm not entering the wallet, I'm accessing your computer.
---
Storing the private key on the same computer? That's really reckless.
---
$27 million just to click on a file, I'm truly stunned.
---
Cross-chain laundering of stolen funds—this hacker knows DeFi better than I do.
---
Is Safe multisig basically useless? Now that's truly terrifying.
---
Computer security is even more important than a cold wallet—this is a real wake-up call.
---
Getting hacked on both chains sounds scary, but it's really just a failure in private key management.
---
Just thinking about it makes me nervous. Who can say their computer is 100% clean?
---
How much did this guy trust that malicious file—he just ran it directly.
---
The stolen funds are gone, and there's no way to get them back.
View OriginalReply0
LiquidatedThrice
· 12-05 14:28
Damn, $27 million gone just like that? I just want to know what this guy was thinking, putting two private keys on one computer—this is basically suicide.
Cross-chain black-on-black crime, these people really know how to play. Bridging to Ethereum and thinking they could get away? Nothing escapes the blockchain.
Unbelievable, just clicking a malicious file and it’s all over, taking a massive loss this time.
$27 million… I really can’t understand this mindset, it’s just insane.
Zero security awareness, man. How are you even playing with multisig like this?
View OriginalReply0
ProbablyNothing
· 12-05 14:24
Both private keys stored on one computer? That's basically suicide, unbelievable.
$27 million gone just like that. I just want to know when exchanges will start taking responsibility.
Cross-chain money laundering—hackers' techniques are old but still work.
Storing private keys on an infected computer? That’s seriously lacking in security awareness.
Yet another heartbreaking case—there’s just no way to guard against everything in this space.
Safe multisig is basically useless if both keys are on the same machine.
Both Solana and Ethereum compromised—these hackers definitely came prepared.
Reading this case just makes me more determined not to use hot wallets, seriously.
$18 million evaporated in an instant—how could anyone sleep well after that?
Lost everything just by opening a malicious file—how is that even possible?
View OriginalReply0
SybilAttackVictim
· 12-05 14:23
Oh my god, this is just absurd. Storing all your private keys on one computer? That’s basically suicidal.
Seriously, $27 million gone just like that—it honestly feels even worse than getting rugged.
This guy must be insanely careless, even playing around with multi-sig like this.
Yet another painful lesson. If you don't know how to use a cold wallet, just stay away from it.
Why are there still people storing private keys like this? Seriously, what are they thinking?
Cross-chain bridge hacker funds—tracking this is definitely going to be even more complicated.
Just looking at this hurts. $27 million, everyone.
This is exactly why I always say security comes first.
You can never completely defend against malicious files.
A simple multi-sig setup is useless in the face of operational mistakes.
$27 Million Vanished Instantly! The Story Behind the Solana and Ethereum Dual-Chain Hack
[Chain News] Another painful major case. A user named Babur just publicly shared his heartbreaking story—$27 million in crypto assets are gone just like that.
Looking at the on-chain data, the main victims this time are two wallets: the Solana address starting with 91xu, and the Ethereum Safe multisig address 0xD2. Just the two largest transfers alone wiped out over $18 million—it’s heartbreaking just to see it.
The hackers didn’t mess around either: they used the 71fM address on Solana and the 0x4f address on Ethereum. To make matters worse, they even played with cross-chain transfers, and some of the stolen funds have already been bridged to the Ethereum network.
The worst part is how it happened—the computer was compromised. Reportedly, Babur clicked and ran a malicious file, and the private keys were exposed just like that. Even more outrageous, it’s possible that both signing private keys for the Safe multisig were stored on the same computer—definitely questionable security awareness.
This incident proves once again: store hardware wallets separately, don’t randomly click on files, and never keep multisig private keys together. A lesson learned the hard way.