What happened
Holdstation reported a multi-chain compromise involving privileged wallet access, with an estimated impact of about $100K and approximately $66K confirmed drained.
Technical root cause
Holdstation reported that a core developer device was compromised through a malicious IDE or browser extension, exposing privileged wallet access; the available evidence does not establish a smart-contract logic flaw.
How it happened
Reported compromised administrative access enabled unauthorized proxy and vault changes across affected deployments. The attacker consolidated proceeds to Ethereum and bridged value to Bitcoin.
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
