A post by @CertiKAlert on X.

CertiK reported that all 16 drains tied to the incident were signed by the same ethsecp256k1 key for the address init1nyn…, with owner events and account sequences matching across the transactions. The security firm said the pattern points to an account-level key control compromise rather than a protocol-level exploit. The finding matters because it narrows the source of the losses to a single signing key, focusing scrutiny on how that key was managed and secured. What to watch next is whether the affected team confirms the compromised key, rotates credentials, and discloses the total value lost across the 16 drains.