#钱包安全漏洞 This case in Russia is worth paying attention to—the key factor in the 20 million ruble theft was the exposure of the wallet's private key/mnemonic phrase. Law enforcement accessed the phone illegally, bypassing the wallet's technical protections, and directly operated transfers within the messaging app. This indicates that the victim likely used an insecure key management method.

From an on-chain perspective, the risks reflected behind such incidents include: first, reliance on a single device (phone as the sole management endpoint); second, cloud backups or plaintext storage; third, lack of multi-signature or cold wallet isolation. When law enforcement loses control of the device, the wallet's defenses collapse instantly.

It is recommended to review your own holdings in light of this case—if your private key/mnemonic phrase is stored on the same device used for daily internet access, the risk exposure is very high. Cold wallet isolation or multi-signature solutions are far less costly than losing funds, especially for positions of significant value. This is not only about protecting against hackers but also about preventing physical threats and abuse of authority.