Block production resumed and 1,227,121 ATOM moved from the reported attacker wallet. Public statements had not identified who controlled the receiving address.
Wallet security
Wallet software, signing risks and user-security developments.
Check whether a report concerns wallet software, a signing request or the handling of keys. A suspected exposure and a confirmed compromise are different states, and recommendations should be read in the context of the affected product and version.
2 distinct developments · 17 Sept 2026 – 24 Sept 2026. Newest first.
The September report describes credential theft through lookalike Coinbase and MetaMask extensions.