On July 8, 2026, an official device used by thousands of developers to build applications on the Injective network was briefly compromised with malicious code intended to steal users’ crypto wallet seed phrases and private keys. This incident is considered dangerous because it did not come from a fake device or a counterfeit website, but instead from an official developer account long trusted by the Injective project that was taken over by an attacker. The account was then used to publish an update version that appeared legitimate but had actually been compromised.