Engineer credentials phished; mining payouts diverted.
Attacker wallets funded and staged ahead of the social engineering exploit against NiceHash.
$64.0M drained from NiceHash on Bitcoin via Social Engineering.
SlowMist flagged the anomalous transactions and published an initial alert.
NiceHash paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$64.0M returned to users — negotiation, freezes, or a whitehat return closed the incident.