Ngrave phishing: $2.56 million left 70 wallets after a hijacked push provider

The information provided in this article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments carry a high degree of risk. Always conduct your own research.Attackers hijacked the push provider of Belgian hardware wallet maker Ngrave and sent fake security alerts to users of the LIQUID app on October 17. Anyone who entered their recovery words lost their balance: between $2.56 million and $2.65 million flowed out, while the devices themselves remained untouched according to the company.Ngrave, the Belgian hardware wallet maker, published an incident report on October 19, 2026 describing an uncomfortable gap: attackers took over the account of an external provider that sends push notifications for the companion app LIQUID, and used that channel to send users fake security alerts. Anyone who followed the alert and entered their recovery words lost their balance. By the company's count, around $2.56 million left roughly 70 wallet addresses across four networks. The devices themselves were not the target. Ngrave states explicitly that neither the code of the LIQUID app nor the ZERO hardware nor the keys stored on it were touched. What w...