SlowMist Cosine: The Squid security incident issue wasn't with the private key, but rather a vulnerability in the Safe Wallet module.

According to Mars Finance, Yu Xian, founder of SlowMist, published an article on the X platform interpreting the Squid security incident. He stated that sampling revealed the relevant Safe wallets were all single-signature with different owners, but the problem wasn't with the private keys. The issue lay in a vulnerability in the module (SquidRouterModule) used by these Safe addresses. Attackers could forge messages, easily bypass verification, initiate subsequent exchange operations, and transfer funds from the target Safe wallet. Furthermore, Yu Xian also disclosed the attacker's profit-taking address information. Previously, it was reported that a third-party Gnosis Safe module was exploited on Basescan and Ethereum, causing approximately $3.2 million in losses. The victims were 86 Gnosis Safes that had added the contract as a trusted Safe Module. This contract was named "SquidRouterModule" on Basescan. Squid subsequently clarified that it was not affected by the Gnosis Safe vulnerability incident.