Mask Network Founder Suji Yan’s Personal Wallet Hacked for $4 Million

Bitget App

Trade smarter

CryptoNews2025/02/28 03:34

By:Hongji Feng

The stolen funds have been transferred and converted into Ethereum, showing how quickly digital assets can change hands after a breach. The incident raises concerns about the security of private keys and the difficulty of recovering stolen crypto once it moves through decentralized networks.

Last updated: February 27, 2025 13:02 EST

Mask Network Founder Suji Yan’s Personal Wallet Hacked for $4 Million image 0

Key Takeaways:

Suji Yan’s crypto wallet was compromised, with stolen assets later transferred and converted into approximately 1,700 ETH.
The theft occurred while Yan attended a private gathering on his 29th birthday, raising alerts about offline attacks and unauthorized access to personal devices.
Blockchain security firms and law enforcement are investigating the breach to determine how the attack was carried out.
The incident exposes the risks of managing private keys on mobile devices and the vulnerabilities in self-custody security practices.
As crypto thefts increase, the need for stronger asset protection measures and alternative security models continues to grow.

Suji Yan, founder of Mask Network, reported the theft of over $4 million in cryptocurrency from his personal wallet on February 27, the same day as his 29th birthday.

I turned 29 yrs old today, 6 hours ago. Around 3 hours ago – one of my public wallet I carried on my phone was hacked and 4m$+ assets was stolen. All the stolen tx seems manual and span 11+ mins.

So either the private key was leaked same day as my birthday and hacker manual tsf… https://t.co/SkuIb2nrPf
— Suji Yan – Mask is BUIDLing (@suji_yan) February 27, 2025

In a social media post, he stated that the funds were personal and unrelated to his company or investment projects.

Yan Seeks Investigation as Stolen Funds Are Moved

Yan revealed that the theft occurred while he attended a private gathering with close friends.

His phone was briefly unattended during the event, raising concerns about a possible offline attack.

The transactions, carried out manually over an 11-minute period, suggest that the attacker had direct access to his private key.

Yan has contacted blockchain security firms and independent investigators to trace the stolen funds and determine how the breach occurred.

He is also cooperating with authorities and awaiting expert analysis before providing further updates.

Yan called on the perpetrator to confront him directly if the attack was conducted offline.

He stated that the crypto industry should not operate as a “dark forest” and expressed his determination to hold those responsible accountable.

“Thus, when Heaven is about to confer a great office on any man, it first exercises his mind with suffering, and his sinews and bones with toil. It exposes his body to hunger, and subjects him to extreme poverty,” Yan responded to the hack, quoting Mencius .

“It confounds his undertakings. By all these methods it stimulates his mind, hardens his nature, and supplies his incompetencies,” posted Yan.

On-chain data shows @suji_yan , founder of @realMaskNetwork was hacked for ~$4M.

These assets were transferred to a new address at the same time and swapped for $ETH . https://t.co/bdzqI2fYav pic.twitter.com/NJnjCygLAT
— lmk.fun 🦜 (Prev. Scopescan) (@lmkfun) February 27, 2025

According to lmk.fun, the assets have been transferred to a new address and swapped for about 1,700 ETH .

Evolving Threats Challenge Self-Custody Practices

The incident stresses the risks associated with storing digital assets on mobile devices , particularly in social settings.

While the exact attack method remains unclear, the case exposes security vulnerabilities in private key management and self-custody.

As crypto thefts become more frequent, concerns over asset security continue to grow.

Self-custody offers financial independence but comes with significant risks, especially when private keys are stored on easily accessible devices.

With attacks becoming more sophisticated, users must balance accessibility with stronger security measures.

Beyond technical vulnerabilities, social risks such as physical access to devices, insider threats, and targeted attacks are often overlooked.

As billions in assets remain in self-custody, the industry may increasingly explore alternative security models to address evolving threats .

Frequently Asked Questions (FAQs):

What security risks are unique to storing crypto on mobile devices?

Mobile wallets provide convenience but also expose users to risks like malware, phishing attacks, and physical theft. Unlike hardware wallets, mobile wallets keep private keys on internet-connected devices, making them more vulnerable to unauthorized access, especially in social settings where a phone could be briefly unattended.

How do offline attacks on crypto wallets typically happen?

Offline attacks occur when someone gains physical access to a user’s device, extracts private keys, or installs malware. This can happen through direct tampering, spyware, or social engineering. In cases where a phone is left unattended, even briefly, attackers may exploit vulnerabilities to compromise stored crypto assets.

Can stolen crypto be recovered once it has been moved?

Recovery is difficult, as transactions on blockchain networks are irreversible. However, tracking services and law enforcement can monitor stolen funds if they move through centralized exchanges. If the attacker attempts to cash out through regulated platforms, authorities may intervene.

What steps can be taken to prevent unauthorized access to crypto wallets?

Using hardware wallets, keeping private keys offline, enabling multi-signature security, and avoiding storage on mobile devices are key precautions. Users should also avoid reusing passwords, implement strong authentication, and remain cautious about storing wallets on easily accessible devices like smartphones.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Locked for new tokens.

APR up to 10%. Always on, always get airdrop.

Lock now!