Whale pockets TLBL has misplaced greater than $26 million in a second main crypto theft, two years after a phishing assault drained $24 million from the holder.
The newest incident seems to contain a compromised personal key, elevating a troublesome query for big crypto holders: how a lot can stronger safety practices assist when a pockets has already been focused?
TLBL Loses $26M in Second Assault
Lookonchain reported on August 13 that greater than $26 million in belongings had been drained from three wallets linked to TLBL. The blockchain analytics account mentioned the whale “seems to have had its personal key compromised,” with the stolen belongings together with aWBTC, DAI, WBTC, ETH, aUSDC, sDAI, USDS, cbBTC, and several other different tokens.
Lookonchain’s evaluation places the full worth of belongings related to TLBL’s two thefts at about $50.3 million. The sooner incident, which passed off two years in the past, concerned 9,579 stETH price $15.54 million and 4,851 rETH price $8.51 million being stolen in a phishing assault.
The newest loss is totally different. PeckShield mentioned that the sufferer had misplaced about $25.6 million, together with roughly $6.3 million in aWBTC, $5.1 million in DAI, $4.7 million in WBTC, and $2.6 million in ETH. Based on the safety agency, the attacker had already swapped a part of the stolen holdings into 20 million DAI and about 3,000 ETH, price about $5.64 million, with the funds unfold throughout 4 addresses.
The slight distinction between the figures from Lookonchain and PeckShield comes from the asset valuations included of their respective monitoring. Each accounts, nonetheless, level to the identical broad occasion: a big TLBL-linked pockets was drained, with private-key compromise recognized because the obvious trigger by Lookonchain.
Individually, Lookonchain flagged a smaller case this week involving handle poisoning, the place a sufferer copied a pockets handle straight from their transaction historical past with out checking it and despatched funds to a lookalike handle managed by an attacker, dropping $100,000 within the course of. It’s a special technique than what hit TLBL, nevertheless it factors to the identical underlying drawback: wallets are nonetheless one of many weakest hyperlinks.
A Dangerous 12 months for Personal Keys
TLBL’s second hit lands in the course of what has already been a report run for crypto theft. A Blockaid report revealed August 1 discovered hackers stole $1.1 billion throughout 212 incidents within the first half of 2026, and privileged key misuse, the identical class as what hit TLBL as we speak, accounted for roughly $790 million of that complete, about three-quarters of all funds stolen within the interval.
Month-to-month incident counts climbed from 18 in January to 57 in June. Blockaid individually discovered that North Korea-linked hackers accounted for about 55% of all funds stolen within the interval, about $609 million, though to this point nothing within the information tied to TLBL’s case factors to that cluster particularly.
The submit Crypto Whale Loses $26M After Obvious Personal Key Compromise appeared first on CryptoPotato.