Slow Fog Cosine: A user is suspected of having their private key leaked and stolen due to computer poisoning, resulting in a loss of 27 million dollars in cryptocurrency assets
Slow Fog's cosine posted on platform X, stating that user Babur encountered a theft incident involving $27 million worth of cryptocurrency assets. According to analysis, the stolen assets mainly involve two addresses: Solana address 91xu and Ethereum Safe multi-signature address 0xD2, with the two largest stolen assets totaling over $18 million.
The hacker addresses are 71fM (Solana) and 0x4f (Ethereum), with some funds already cross-chain to the Ethereum network. This incident is suspected to have been caused by a poisoned computer, where the user double-clicked to run a malicious file, leading to the leakage of private keys, including two signing private keys of the Safe multi-signature that may have been stored on the infected computer.
Related tags
Related tags








