TechFlow reports that SlowMist founder Yu Xian stated today that SlowMist and MistTrack have received at least four cases involving stolen stETH being bridged to the Blast mainnet.
The attack pattern involves sending a small amount of ETH as gas fees from clearly tainted addresses to compromised wallets, then bridging the stETH assets to the Blast mainnet and transferring them further. Finally, the remaining ETH in the victims' accounts is moved to different addresses.
The known losses exceed 100 stETH, suggesting this might be a coordinated campaign. The victims’ mnemonic phrases or private keys must have been leaked, and attackers have already initiated operations on the Blast mainnet.




