WLFI Freezes 272 Wallets Following Pre-Launch Phishing Attacks
World Liberty Financial (WLFI) moved swiftly to contain a security breach affecting 272 wallets compromised prior to its token launch. The company identified phishing attacks and leaked credentials as the attack vector, emphasizing the breaches originated from third-party tools rather than WLFI's infrastructure.
Attackers planted malicious contracts in vulnerable wallets, enabling automatic token drainage upon WLFI's September 1 launch. The timing coincided with Ethereum's EIP-7702 Pectra upgrade, which may have contributed to the exploit window. WLFI's security team froze affected addresses within hours of detecting suspicious activity.
The protocol implemented emergency smart contract modifications to facilitate bulk fund reallocation. A verification system ensures accurate token restitution to legitimate owners. As a protective measure, WLFI burned 166.667 million tokens ($22.14 million) from compromised addresses.
