Superfortune: The leakage of the attacker's private key rather than address poisoning is not the work of an insider
Superfortune, incubated by Manta, recently released an update on the X platform regarding a security incident, stating that the attack was not carried out by internal personnel and that no team members were involved. The claim about the team secretly selling tokens is incorrect. The team has also not had any contact with Web3Port.
The investigation confirmed that the attack was not due to address poisoning, but rather a leak of the signer's private key. The attacker independently held the private key and submitted a transaction with a forged address 43 minutes after the correct transaction. The forged address shares the first and last four characters with the correct address (starting with 0x70AE and ending with 5C15) to disguise itself in the Safe interface preview. The stolen funds are fully traceable and are currently stored in three cold wallets on Ethereum, containing approximately 2784 ETH, along with about 170,000 USDT that were cross-chain transferred out.
The attacker also created a large number of counterfeit addresses and sent false transfer events to these addresses using Unicode-forged token symbols in an attempt to confuse tracking. This counterfeit address construction technique is the same as the method used when attacking this project. The attacker had pre-built a large-scale infrastructure, indicating that this was an industrialized operation rather than an opportunistic attack.
You may also like

WEEX Makes Affiliate Access Easier on the Web and in the App

Customize Your Spot Trading Page: Drag Modules and Move the Order Panel Where You Want It

Perp DEX: The Next Generation Exchange "War"

10 Counterintuitive Insights on Latin American Payments

The AI gamble of mining companies: Valuations enter a phase of differentiation, and it's hard to turn the tide

A letter from Alliance to entrepreneurs: Written on the occasion of Cursor selling for 60 billion dollars

Stablecoins Finally Find Real Returns: On-Chain Reinsurance Re Explained | Interview with Re Founder Karan Saroya

The impossible triangle is simply a pseudo problem

Will MicroStrategy fall into a death spiral? What will the macro trend be in the second half of the year?

Blockchain Capital Partner: The Core Secret of Arbitrage

STRC unanchored by 11%, can the perpetual motion machine of Strategy still operate?

Bitcoin Market Analysis 2026: Can BTC Reach $150K by Year-End?

Bitcoin ETF Outflows Hit a Record $4.4 Billion: What Are Traders Doing With Their Cash?

WEEX App Just Got Smarter – New Tabs for Faster Trades & Easy Asset Management

WEEX All-New Search Features: Find, Trade & Earn Faster Than Ever

Morning Report | Illinois signs the strictest digital asset tax law in the U.S.; RWA tokenization market size surpasses $43 billion, institutions accelerate the migration of on-chain assets

Full version of the debut Q&A! Federal Reserve Chairman Waller: Sticking to the 2% inflation target, establishing five special working groups, individual did not submit the dot plot




