User Babur has reported a theft of approximately $27 million in cryptocurrency assets, according to a post by SlowMist's Cosine on X. The stolen assets were primarily located in two addresses: a Solana address (91xu) and an Ethereum Safe multi-signature address (0xD2). The largest thefts from these addresses totaled over $18 million. Some of the stolen funds have been transferred cross-chain to the Ethereum network. Cosine suggested that the theft may have been caused by a malware infection on the user's computer. The malware likely led to the exposure of private keys after the user executed a malicious file. It is suspected that the two private keys required for the Safe multi-signature were stored on the compromised computer, facilitating the theft.