Ok, my wallet got drained - all ENS, all Moxie, pretty much everything of value. Can anyone help me to trace what happened? I haven't even touched metamask in ten days or so!

LastPass https://x.com/tayvano_/status/1804594069668327788

dear longtime lastpass users who had their keys drained today or yesterday or tomorrow: please include your compromised address(es) in your DM.

if it was drained on a weird af network, link it.

do not ask if you can tell me something.

tell. me. your. address.

ty.

🚨🚨🚨ONCE AGAIN SOUNDING THE ALARM

IF YOU HAVE OLD PRIVATE KEYS, SEEDS, API KEYS: PLEASE MIGRATE YOUR FUNDS TO NEW / SECURE / COLD STORAGE *NOW*

ESPECIALLY LASTPASS USERS!!!!!!!!!!!

Tay 💖

superstar curator • culture strategist • DJ • yes you know me from Boiler Room • visit me in /hyperreal

I'm sorry this happened to Derek :/

The pattern of this hack matches that of the LastPass security breach.

If you have ever stored your backup phrase in LastPass, rotate to a new address.

LastPass did a poor job of encryption, their vaults were leaked, and hackers decrypted wallet backup phrases.

summoning /daylight | kylemccollom.com | we are hiring: careers.daylight.xyz

Based on the other likely victims who had funds sent to 0xf986161dc2aa7a44a166AEe58Aac67B1605357D1, this appears to be the most likely explanation. All of them are aged wallets, at least two others are Metamask. Key compromise seems certain, Lastpass storage would make the most sense.

After DCing with @kyle, this is almost certainly it.

I verified that my LastPass export contains the key.

I (correctly) moved off of LP in late 2022 after the first hack and moved to Ledger / paper / 1Password after the breach.

However, I lazily never moved away from my primary hot wallet.

Its key was in LastPass.

@opiumhum looking at your address and the transactions, it's clear your key was compromised.

are you positive you didn't save your backup phrase in lastpass at some point in the past?

Coinbase employee (Investigatooor), personal account. Onchain is the future.

@opiumhum looking at your address and the transactions, it's clear your key was compromised.

are you positive you didn't save your backup phrase in lastpass at some point in the past? https://warpcast.com/derek/0x1887fd6d