Hot wallet keys leaked; most assets frozen by issuers.
Attacker wallets funded and staged ahead of the private key compromise exploit against KuCoin.
$281.0M drained from KuCoin on Ethereum via Private Key Compromise.
SlowMist flagged the anomalous transactions and published an initial alert.
KuCoin paused affected contracts or withdrawals and began tracing outbound flows.
Stolen assets followed through mixers, bridges, and exchange deposit addresses.
$240.0M returned to users — negotiation, freezes, or a whitehat return closed the incident.