Ngrave phishing: $2.56 million left 70 wallets after a hijacked push provider

Ngrave, the Belgian hardware wallet maker, published an incident report on October 19, 2026 describing an uncomfortable gap: attackers took over the account of an external provider that sends push notifications for the companion app LIQUID, and used that channel to send users fake security alerts. Anyone who followed the alert and entered their recovery words lost their balance. By the company's count, around $2.56 million left roughly 70 wallet addresses across four networks. The devices themselves were not the target.