This morning, users of the multifunctional custodial wallet xRocket had trouble withdrawing tokens from the TON network. The following information is tentative and requires verification.
Several Russian-language sources reported that withdrawing TON and tokens was not possible, unless assets were converted to USDT. The hacker commented about this in a post.
Later, the user that got hold of the wallet wrote:
You should be thankful that I did it. If it had been someone else, he probably wouldn't have returned anything.
Dmitry Nekelov indeed returned 50,000 TON (1 • 2 • 3). He also claimed to have received 30,000$ as a reward, as well as 'other benefits'. Отследить другие транзакции вы можете в этом кошельке.
At the moment, the wallet has been suspended, and the xRocket team has stated the following:
"Technical maintenance, the bot will be launched within a few hours. Please be patient."
This is another case that demonstrates how vulnerable our funds are in custodial services. After all, all the hard-earned funds can be stolen or seized due to the lack of a private key. (Not to diss xRocket, but it's a valid point to consider).
Let's wait for more details as the story develops.
Your @TonPost