SlowMist Cosine: Hackers have stolen assets from at least 7 users, possibly due to mnemonic phrase leakage

According to ChainCatcher, users on platform X reported that an imToken wallet user suffered a theft of 112 BNB while participating in a TGE event on a certain exchange.

Security expert Cosine from SlowMist (@evilcos) conducted a preliminary analysis of on-chain data and found that the hacker address (0x8AeB0171742AC50d20884997F9f5009a233216D5) has caused financial losses to at least seven users. The attack pattern suggests that the hacker may have carried out a planned attack by obtaining mnemonic phrases or private keys, with victims typically having their assets transferred out shortly after depositing large amounts of funds. Security teams have begun marking and blacklisting the relevant hacker addresses and are continuously monitoring the situation.