I have been following his thread on Twitter and it’s scary what he discovered. Apparently there were some people whose cold storage and hardware wallet funds were also drained. And he still can’t find the flaw.
Many ETH ICO tokens which were never moved were also stolen and these were OG unlike new retail users. Only thing I can think of is the last pass hack and they kept their seed hosted there. Since the hacks started around that time.
This is very terrible, if it's like this there is no safe place to store the assets that we have.
When storing on a centralized exchange, sometimes there are also feelings of anxiety because large exchanges cannot guarantee that our assets are safe either.
I think there was an incidence where they got hacked like this before and the culprit hit the Google DNS or cookie, I'm not sure but I remember there wasn't any problem with the Ethereum network but the hackers put some malicious software into Google DNS that they were able to get the users private key and stole their ETH. it was huge because lots of people quickly withdraw their ETH and others lose their trust to invest in ETH because their funds were stolen quickly. I think they were able to fix it for about a day and they were able to find the source of that hack.