Metamask dev is investigating a massive wallet draining operation which is targeting OGs, with VERY sophisticated attacks. This is NOT a noob-targeting phishing attempt, but something far more advanced. Nobody knows how for sure. 5000+ ETH has been lost, since Dec 2022, and more coming.

Relevant thread:

https://twitter.com/tayvano_/status/1648187031468781568

Key points:

Drained wallets included wallets with keys created in 2014, OGs, not noobs. Those drained are ppl working in crypto, with jobs in crypto or with multiple defi addresses. Most recent guess is hacker got access to a fat cache of data from 1 year ago and is methodically draining funds. Is your wallet compromised? Is your seed safe? No one knows for sure. This is the pretty unnerving part. There is no connections to the hacked wallets, no one knows how the seeds were compromised. Seeds that were active in Metamask have been drained. Seeds NOT active in Metamask have been drained. Seeds from ppl who are NOT Metamask users have been drained. Wallets created from HARDWARE wallets have been drained. Wallets from Genesis sale have been drained.

Investigation still going on. I guess we can only wait for more info.

The scary part is that this isn’t just a phishing scheme or a seed reveal on cloud. This is something else. And there is still 0 connections between the hacks as they seem random and all over the place.