WLFI Burns $22M in Tokens to Restore Funds After Widespread Wallet Breaches

Highlights:

• WLFI has started a recovery plan to restore user funds after several wallets faced breaches.
• WLFI has burned tokens in a controlled action that protects users and strengthens the project’s response to security failures.
• Lawmakers are seeking answers as WLFI faces new questions about reported links to sanctioned groups.

World Liberty Financial said Wednesday that it is reallocating user funds after identifying breaches linked to phishing attacks and leaked seed phrases. The project said a small group of wallets faced direct exposure due to third-party lapses that affected security. It added that its platform and contracts stayed intact during the incidents. The team started internal checks in September and froze impacted wallets to prevent further damage.

Advertisement

World Liberty Financial: wallet breach and major token movements.

WLFI reported that a portion of user wallets had been compromised. The platform froze the affected accounts, conducted renewed KYC, and introduced new smart-contract logic to migrate funds safely. According to… pic.twitter.com/XckG7D0ybY

— Tic Tac | Crypto News (@Spirit_LT) November 20, 2025

WLFI required the affected users to undergo identity verification in order to assert ownership. The team gathered new wallet addresses and established a controlled migration plan. It also experimented with new smart contract logic to facilitate the transition. The project emphasised that all checks will take place, and verified users will get the money in safe wallets. Nevertheless, WLFI did not reveal the number of users who incurred losses or the number of values at risk.

The project noted that several cases came from simple phishing attempts that tricked users into sharing sensitive data. Some cases also involved exposed keys from older storage tools. WLFI said these problems created gaps that attackers quickly exploited. It urged users to avoid unofficial channels and report suspicious links. The team added that it will keep monitoring accounts during the final stages of restoration.

WLFI Burns Tokens as Recovery Plan Targets Compromised Wallets

WLFI carried out a major recovery by running an emergency function that burned millions of tokens linked to compromised wallets. The action removed 166.667 million WLFI from wallets flagged during earlier checks. WLFI then reissued the same number of tokens to verified recovery wallets. The total value of the burned assets stood at around $22.14 million.

The team said it designed the function for cases where tokens fall into attacker control or when users lose access before vesting. The process followed weeks of tests on controlled transfer logic. WLFI said these tests reduced the chance of errors during the final execution. It added that only users who completed verification received reissued tokens. Impacted users who did not start the process still hold frozen wallets.

Analysts also reviewed the recovery. On-chain researcher Emmett Gallic said the function aligned with earlier code patterns for emergency scenarios. He said the design helped WLFI reclaim assets without exposing the wider supply to manipulation. The recovery also addressed cases linked to EIP-7702 issues during the Pectra upgrade. Attackers planted malicious contracts in several wallets during that event. These contracts later triggered token drains when users approved transactions.

WLFI said it froze 272 wallets after identifying those patterns. It also warned users about fake support pages that targeted victims during the freeze period. The team said it limited the number of affected users by acting quickly during the first signs of trouble.

Political Pressure Mounts as WLFI Faces Claims of Sanction-Linked Activity

WLFI’s recovery push comes as the project faces pressure from lawmakers. Earlier this week, Senators Elizabeth Warren and Jack Reed requested a federal review of alleged token sales to sanctioned groups. The claims came from a watchdog report that linked WLFI flows to Lazarus, a Russian evasion network, and an Iranian exchange. However, WLFI did not address those claims in its recent updates.

US Senators Call for Probe into World Liberty Financial

Senators Elizabeth Warren and Jack Reed allege the Trump family’s DeFi protocol is tied to malicious actors from North Korea and Russia. pic.twitter.com/kDuVHG5iIM

— 🥞C4B Freedom🥞 (@Crypto4bailout) November 18, 2025

A number of blockchain analysts objected to aspects of the watchdog analysis. MetaMask security lead Taylor Moynahan denied the connection with Lazarus. Analyst Nick Bax also raised questions about the validity of certain on-chain labels. WLFI also announced that it would proceed with its development plans, such as the USD1 stablecoin and other integrations. The project indicated it is still working on the recovery efforts before moving to new features.

Advertisement