-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

0xCERT Security Advisory 0xCERT-2026-0259
============================================================

Advisory-ID:  0xCERT-2026-0259
Severity:     High
Published:    2026-10-17T00:00:00.000Z
Updated:      2026-10-21T07:23:32.565Z
Chains:       Bitcoin, Other / Multi-chain, Ethereum
URL:          https://www.0xcert.com/advisory/0xCERT-2026-0259

Title: Ngrave LIQUID Notification Phishing

Summary
- -------
Attackers hijacked the push-notification provider behind Ngrave's LIQUID app and sent fake alerts that phished recovery phrases, draining about 70 wallets for roughly $2.56 million.

Details
- -------
Summary
Attackers hijacked the push-notification provider behind Ngrave's LIQUID app and sent fake alerts that phished recovery phrases, draining about 70 wallets for roughly $2.56 million.

Incident
- - Victim: Ngrave
- - Date (UTC): 2026-10-17
- - Estimated loss: $2.6M
- - Chain(s): Bitcoin, XRP Ledger, Ethereum, Stellar
- - Attack type: phishing / social engineering
- - Funds status: stolen

Recommended actions
- - Revoke token approvals granted to Ngrave contracts until the project confirms they are safe
- - Integrators: pause or delist affected assets and monitor for attacker fund movements
- - Beware of follow-on phishing: ignore unofficial "refund", "recovery", or "claim" links and DMs; use the project's verified channels only

Source & attribution
Full analysis on Blockchain Breaches, 0xCERT's incident archive: https://www.blockchainbreaches.com/en/breaches/ngrave-2026. Primary sources: https://news.bitcoin.com/security/crypto-thieves-hijack-ngrave-alerts-and-walk-away-with-2-56m/ ; https://www.kucoin.com/news/flash/ngrave-phishing-attack-steals-2-56m-from-70-wallets ; https://www.chaincatcher.com/en/article/2297714 ; https://cryptonews.net/news/security/33624607/.

References
- ----------
- - https://www.blockchainbreaches.com/en/breaches/ngrave-2026
- - https://news.bitcoin.com/security/crypto-thieves-hijack-ngrave-alerts-and-walk-away-with-2-56m/
- - https://www.kucoin.com/news/flash/ngrave-phishing-attack-steals-2-56m-from-70-wallets
- - https://www.chaincatcher.com/en/article/2297714
- - https://cryptonews.net/news/security/33624607/

Verify with the 0xCERT OpenPGP key: https://www.0xcert.com/pgp.asc
Fingerprint: 5F94 3ED1 1E50 CF31 2128  C493 CCC7 D9EC 9415 723D

-----BEGIN PGP SIGNATURE-----

wrsEARYKAG0FgmroIikJEDe9Tbcr+ZxrRRQAAAAAABwAIHNhbHRAbm90YXRp
b25zLm9wZW5wZ3Bqcy5vcmc4DOJTxvynD7M9m8MZsY+78PCe5No9q6f2uLTV
ZvRikBYhBGCkkFZbJcT5QWu27ze9Tbcr+ZxrAAAd4wD/SJMG2gsz+Km9YTbG
i4DWQVUrUCkbwHJ+M3GJPKDbgcgA/ixLeJiZAKaqLh4m+xoKPowUbv642Vik
wB7EMRwHt/kA
=RLZW
-----END PGP SIGNATURE-----