Highlights:
World Liberty Financial said Wednesday that it is reallocating user funds after identifying breaches linked to phishing attacks and leaked seed phrases. The project said a small group of wallets faced direct exposure due to third-party lapses that affected security. It added that its platform and contracts stayed intact during the incidents. The team started internal checks in September and froze impacted wallets to prevent further damage.
WLFI required the affected users to undergo identity verification in order to assert ownership. The team gathered new wallet addresses and established a controlled migration plan. It also experimented with new smart contract logic to facilitate the transition. The project emphasised that all checks will take place, and verified users will get the money in safe wallets. Nevertheless, WLFI did not reveal the number of users who incurred losses or the number of values at risk.
The project noted that several cases came from simple phishing attempts that tricked users into sharing sensitive data. Some cases also involved exposed keys from older storage tools. WLFI said these problems created gaps that attackers quickly exploited. It urged users to avoid unofficial channels and report suspicious links. The team added that it will keep monitoring accounts during the final stages of restoration.
WLFI carried out a major recovery by running an emergency function that burned millions of tokens linked to compromised wallets. The action removed 166.667 million WLFI from wallets flagged during earlier checks. WLFI then reissued the same number of tokens to verified recovery wallets. The total value of the burned assets stood at around $22.14 million.
The team said it designed the function for cases where tokens fall into attacker control or when users lose access before vesting. The process followed weeks of tests on controlled transfer logic. WLFI said these tests reduced the chance of errors during the final execution. It added that only users who completed verification received reissued tokens. Impacted users who did not start the process still hold frozen wallets.
Analysts also reviewed the recovery. On-chain researcher Emmett Gallic said the function aligned with earlier code patterns for emergency scenarios. He said the design helped WLFI reclaim assets without exposing the wider supply to manipulation. The recovery also addressed cases linked to EIP-7702 issues during the Pectra upgrade. Attackers planted malicious contracts in several wallets during that event. These contracts later triggered token drains when users approved transactions.
WLFI said it froze 272 wallets after identifying those patterns. It also warned users about fake support pages that targeted victims during the freeze period. The team said it limited the number of affected users by acting quickly during the first signs of trouble.
WLFI’s recovery push comes as the project faces pressure from lawmakers. Earlier this week, Senators Elizabeth Warren and Jack Reed requested a federal review of alleged token sales to sanctioned groups. The claims came from a watchdog report that linked WLFI flows to Lazarus, a Russian evasion network, and an Iranian exchange. However, WLFI did not address those claims in its recent updates.
A number of blockchain analysts objected to aspects of the watchdog analysis. MetaMask security lead Taylor Moynahan denied the connection with Lazarus. Analyst Nick Bax also raised questions about the validity of certain on-chain labels. WLFI also announced that it would proceed with its development plans, such as the USD1 stablecoin and other integrations. The project indicated it is still working on the recovery efforts before moving to new features.
eToro Platform
Best Crypto Exchange
eToro is a multi-asset investment platform. The value of your investments may go up or down. Your capital is at risk. Don’t invest unless you’re prepared to lose all the money you invest. This is a high-risk investment, and you should not expect to be protected if something goes wrong.


