Digital Asset
Intelligence
Security Incident · Wallet

WLFI Phishing Attack & Private Key Leakage

·Historical incident record

Incident Overview

According to a WLFI announcement, prior to the platform’s official launch, some user wallets were compromised due to phishing attacks or mnemonic phrase leaks. WLFI emphasized that the incident was not caused by any platform or smart contract vulnerability, but originated from third-party security issues. The team has developed new smart contract logic that allows assets to be reassigned to secure new wallets after completing KYC verification. Wallets that have not submitted a request or failed verification will remain frozen, though users can initiate the recovery process through customer support. According to Emmett Gallic, World Liberty Fi burned a total of 166.67 million WLFI tokens (worth approximately $22.14 million) from a suspected compromised wallet and reallocated an equal amount of tokens to a new secure address.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    WLFI

    Attack methodSocial Engineering
    Reported lossNot disclosed
  2. Incident date
    Target

    Aerodrome

    Attack methodDomain Hijacking
    Reported loss$ 700,000
  3. Incident date
    Target

    Nofx AI

    Attack methodPrivate Key Leakage
    Reported lossNot disclosed
  4. Incident date
    Target

    Almanak

    Attack methodDDoS Attack
    Reported lossNot disclosed
  5. Incident date
    Attack methodUnknown
    Reported loss$ 3,100,000