Attackers accessed 13 long-inactive wallets holding roughly $9 million; about $4.5 million was stolen, while roughly $4.7 million in remaining assets was moved out after the breach was detected on June 5.
A holder of Rocket Pool’s liquid staking token rETH lost about $4.5 million after attackers accessed 13 long-dormant wallets on June 5. The wallets held roughly $9 million in total, and the victim moved about $4.7 million in remaining assets before the attacker could take more. On-chain monitor Specter said the wallets had been inactive for years, a pattern that can make neglected addresses attractive targets if old credentials or signing setups are later compromised. Specter also said the stolen funds had already begun to be laundered.