A software flaw at Blink Wallet allowed an attacker to access and empty a few dozen custodial accounts. Services were paused. Non-custodial wallets and the large majority of funds were unaffected. The vulnerability was patched the same day. On September 24, Blink said every affected account had been restored to its exact pre-incident balance. The attacker also accessed account information of about 3,400 other users, but no funds, names, IDs or addresses were taken from those accounts.