NGRAVE traced about $2.56 million in stolen funds after fake security notifications targeted users of its LIQUID app on October 17, according to the company’s incident report dated October 19, 2026.
Compromised notification access led to phishing
The company said attackers hijacked a third-party notification provider’s access and directed users to a copycat website asking for their recovery phrase or Perfect Key. Wallets were emptied after users supplied those credentials. NGRAVE said LIQUID’s app code and the secrets stored on ZERO hardware devices were not breached.
The reported total covered about 70 wallet addresses across four networks, valued at October 17 prices. NGRAVE described it as a minimum while it continued tracing funds and checking customer reports.
Sources: NGRAVE’s October 19 incident report and the BlockBeats security roundup, published October 28, 2026, at 02:43:27 UTC.