NEM hot wallet keys stolen via spear phishing.
Attacker wallets funded and staged ahead of the private key compromise exploit against Coincheck.
$534.0M drained from Coincheck on Ethereum via Private Key Compromise.
Chainalysis flagged the anomalous transactions and published an initial alert.
Coincheck paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$425.0M of $534.0M recovered (80%); the remainder is still unaccounted for.
Remaining funds monitored across chains with exchange partners notified.