Attacker gained remote access to founder Hugh Karp's computer and replaced his MetaMask extension with a malicious version. The compromised wallet was then used to sign and transfer 370,000 NXM tokens (~$8M) to attacker-controlled addresses. The attacker later demanded 4,500 ETH ransom.

DeFi insurance agreement Nexus Mutual stated on Twitter that the personal address of its founder Hugh Karp was attacked by a platform user, stolen 370,000 NXM and lost more than 8 million US dollars. The official said that this is a targeted attack, only the official name, Karp used a hardware wallet, the attacker obtained remote access to his computer, and modified the wallet plug-in MetaMask, deceived him to sign the transaction, the attacker Completed KYC 11 days ago, and then changed to a new address on December 3. , To transfer funds to the attacker’s own address.