“The Mumbai-based company said the attack stemmed from a mismatch between the information that was displayed on Liminal’s interface and what was actually signed.”
WazirX lost $230 million from a multi-signature wallet with six signatories. The signers approved what the screen showed them, and the payload underneath handed wallet control to the attacker. Liminal, the custody firm doing transaction verification, says the wallet was created outside its ecosystem and its own wallets are fine. Six signatures exist so that nobody has to trust one screen. Everybody trusted one screen.