Unprotected initWallet allowed ownership takeover.
Attacker wallets funded and staged ahead of the access control exploit against Parity Multisig.
$30.0M drained from Parity Multisig on Ethereum via Access Control.
PeckShield flagged the anomalous transactions and published an initial alert.
Parity Multisig paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$12.0M of $30.0M recovered (40%); the remainder is still unaccounted for.
Remaining funds monitored across chains with exchange partners notified.