WLFI
Phishing on Nov 20, 2025 · Phishing Attack & Private Key Leakage
What happened
According to a WLFI announcement, prior to the platform’s official launch, some user wallets were compromised due to phishing attacks or mnemonic phrase leaks. WLFI emphasized that the incident was not caused by any platform or smart contract vulnerability, but originated from third-party security issues. The team has developed new smart contract logic that allows assets to be reassigned to secure new wallets after completing KYC verification. Wallets that have not submitted a request or failed verification will remain frozen, though users can initiate the recovery process through customer support. According to Emmett Gallic, World Liberty Fi burned a total of 166.67 million WLFI tokens (worth approximately $22.14 million) from a suspected compromised wallet and reallocated an equal amount of tokens to a new secure address.
Details
- Date
- Nov 20, 2025
- Kind
- Phishing
- Method
- Phishing Attack & Private Key Leakage
- How in
- Phishing and scams
- Target
- not stated
- Chains
- not stated
After the theft
- Frozen
- yes, amount not stated
“Wallets that have not submitted a request or failed verification will remain frozen, though users can initiate the recovery process through customer support.” (SlowMist Hacked)
Reported by
Related incidents
SwanBluechip, "WLFI phishing, Nov 20, 2025: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht6713b6aeb7/ (data as of 2026-10-31).