According to CoinMeta, GoPlusSecurity warns that a whale named “tlbl” has been attacked again after three years of silence, with cumulative losses exceeding 50 million US dollars. This attack involved two completely different vectors: phishing in 2023 (involving only ERC20 tokens) and a private key leak in 2026 (which even resulted in the clearance of the native ETH tokens). Despite the theft of funds the first time, the victim continued to use the same wallet, which theoretically “would have required only the revocation of the bad approvals,” but that was not the case. The fact that the attacker returned most of the funds the first time only led to the victim becoming even more relaxed about their security. GoPlusSecurity reminds us: 1. The blockchain is the darkest forest, and complacency is the real enemy. 2. For large amounts of assets, hardware wallets should be used, and mnemonic phrases must never come into contact with the internet. 3. Do not sign any transactions unless you fully understand them. Regularly check and revoke expired/risky approvals. 4. After your funds are stolen (even if the attacker refunds them), immediately migrate to new hardware and a new address, without exception.