WazirX published the preliminary investigation results of the attack on the X platform, mainly including:
1. There is no evidence that the WazirX signer's machine was compromised;
2. The attack may have originated from Liminal's infrastructure, bypassing his final verification step;
3. Contrary to some reports, no malicious transactions were signed before July 18, 2024;
4. The attack involved a contract upgrade.
WazirX believes that the attack is most likely due to a vulnerability in Liminal's infrastructure that led to malicious transactions.