Suji Yan, the founder of the Mask Scanner extension, recently lost approximately $4 million in crypto assets due to a security vulnerability in his mobile wallet. Reports indicate that the lost assets were converted to Ethereum 
$2,537 and transferred to various addresses.
Details of the Breach
The incident occurred as a result of a planned attack on an open wallet on Suji Yan’s phone. Analysis suggests that the attack was executed offline, with transactions completed in about 11 minutes. Suji Yan noted that the vulnerability arose during moments when his phone was not in his possession.
Transaction Processes
According to reports from the security firm Cyvers, the attacker aggregated assets like ETH, USDT, WETH, and MASK into a single address before converting them to ETH and transferring them to six different addresses. Following the incident, Suji Yan stated he had begun a thorough investigation in collaboration with organizations such as SlowMist and ZachXBT.
“I was in a private meeting with friends, and my phone was not with me for a few minutes while using the restroom.” – Suji Yan.
“If this is an offline attack, then you should come directly to me. Crypto is not a dark forest, and I won’t leave it like this.” – Suji Yan.
As the investigation continues, Suji Yan is cooperating with authorities and expressed that he will refrain from commenting until an official report is released. Similar incidents affecting market dynamics highlight the importance of security measures and risk management in the sector.
The details of the incident suggest a vulnerability stemming from the phone being out of control during the attack. Measures for protecting digital assets must be thoroughly considered to prevent similar assaults in the future.
Evaluating this incident underscores the necessity of addressing security flaws in the digital asset sector and the need for investors to remain vigilant against risks. The inadequacy of existing security measures serves as a critical warning for industry players to strengthen the system. Investors are encouraged to reassess their protective strategies for digital assets.
