The on-chain transaction bot Debot has experienced a serious security incident. Last Sunday evening, researcher 0xAA issued a warning—many on-chain user wallets were hacked, with the attack pointing to an intrusion into the Debot system. SlowMist founder Yu Xian subsequently confirmed that the private keys of wallets marked as risky had been leaked, and the hackers have currently gained a total profit of $255,000.

This is already the second major wallet security incident in recent times. Previously, a browser wallet extension from a leading exchange was found to have a vulnerability, resulting in losses exceeding $6 million for users worldwide.

Tracing the source, Debot’s Japanese data center was discovered to have been compromised as early as December 10. The official response at the time was to urgently transfer user assets from the Japanese node to a Singapore data center for isolation. However, it is clear that this transfer did not fully resolve the issue—the private key information stored in addresses marked as risky was ultimately leaked.

Debot’s official team has issued an emergency alert: users should immediately go to the asset management page and use the transfer function to move their balances to the official designated secure wallet address. This is currently the most direct way to self-rescue. In a time of frequent security incidents, checking your wallet status has become an essential lesson for every on-chain user.