Crypto thefts: A series of attacks on wallets revives concerns around Railway

A hot wallet belonging to a Definitive executive was drained in a series of attacks that emptied 96 wallets within 70 minutes, with evidence pointing toward hosting provider Railway as the common thread. The incident has revived concerns about Railway's security posture after a string of similar wallet compromises. Definitive, a DeFi yield protocol, saw the executive's hot wallet siphoned alongside dozens of other wallets in just over an hour. The pattern of attacks suggests a shared infrastructure vulnerability rather than isolated key compromises, putting the spotlight on Railway's role in securing private keys and signing operations. Watch for Definitive and other affected protocols to disclose losses and for Railway to issue a post-mortem clarifying whether the breach originated in its environment.