NGRAVE: Third-Party Service Compromise Triggered LIQUID Phishing Alerts

NGRAVE has attributed a wave of phishing alerts received by users of its LIQUID app to a compromise involving a third-party notification service, according to a statement from the hardware wallet company. The incident affected LIQUID app users who received suspicious communications that appeared to originate from official channels.

What NGRAVE said about the LIQUID phishing alerts

NGRAVE said the phishing alerts reaching LIQUID app users were made possible by a breach of an external notification service the company relied on, per reporting by CryptoSlate. The company drew a clear line between its own infrastructure and the compromised third-party system, emphasizing that the phishing messages did not originate from NGRAVE’s core platform. For related coverage, see FINMA Approves Switzerland's First Retail Bitcoin-Holding ETF.

LIQUID is NGRAVE’s companion mobile application, designed to work alongside its hardware wallet. Users who received unexpected alerts during the incident should treat those communications as potentially malicious until NGRAVE issues a formal all-clear. For related coverage, see Switzerland Approves First Spot Bitcoin ETF for Retail Investors.

How a notification-service compromise enables phishing

When a trusted notification service is compromised, attackers gain the ability to push messages that appear indistinguishable from legitimate app alerts. Recipients see a familiar sender name and interface, which lowers suspicion and increases the likelihood they will follow embedded instructions or links. For related coverage, see Switzerland Approves Its First Bitcoin ETF: What It Means.

Phishing delivered through app notification pipelines is particularly effective because users associate push notifications with authenticated, verified sources. A message requesting seed phrase confirmation, a login prompt, or a urgent security warning can easily deceive even cautious users when it arrives through an expected channel. NGRAVE’s disclosure does not confirm whether funds were lost; users should not assume account compromise solely based on having received an alert. For related coverage, see Small XRP Transfers on Binance Reach Highest Share Since October 2024.

What LIQUID app users should do now

Users who received unexpected or suspicious LIQUID notifications should not interact with any links, approve any transactions, or enter any credentials in response to those messages. Verify all communications by navigating directly to NGRAVE’s official website or contacting support through confirmed channels, not through links contained in the alerts themselves. For related coverage, see BlackRock Files for Bitcoin Fund Using Options and Fixed Income.

Preserve screenshots or records of any suspicious notifications received, as these may assist NGRAVE’s incident investigation. Follow any official remediation guidance NGRAVE publishes, and monitor the company’s official statement channels for updates on the scope and resolution of the third-party service compromise.

The incident is a reminder that hardware wallet security extends beyond the device itself. Supply chain risks, including third-party software and service integrations, represent a real attack surface for users of otherwise air-gapped signing solutions.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.