Recently, the security team tracked a serious multi-signature wallet attack. The hacker stole $27.3 million from the compromised wallet and then began operating on mainstream DeFi protocols. Specifically, the attacker has already withdrawn 1,000 ETH (equivalent to $3.24 million) from Aave and is now moving funds to a privacy mixing service for laundering.

What’s more concerning is that the attacker has currently deposited a total of 6,300 ETH into privacy services, amounting to $19.4 million. This indicates that the hacker is actively handling the stolen funds. Moreover, the attacker is also using the compromised multi-signature wallet to engage in derivatives trading—currently holding $20.5 million worth of ETH as collateral, borrowing $10.7 million DAI from a lending protocol to leverage long positions, with a total exposure reaching $9.75 million.

This incident serves as a reminder that while multi-signature wallets are relatively secure, they are not foolproof. Small transaction verification, permission management, and anomaly monitoring all require extra caution.