Carlos, head of growth at onchain execution platform Definitive, reported that his old hot wallet was drained in an early-morning attack he suspects is linked to a Railway vulnerability. The breach involved 96 wallets emptied within approximately 70 minutes starting at 16:11 UTC on mainnet, with additional chains also affected. Carlos confirmed the transfers were signed with his own private key, indicating a compromise of the key or seed phrase, and noted all victim wallets share the same pattern. The attacker, identified by the Base domain noble.base.eth, reportedly used RelayProtocol as their preferred exit channel, executing two batch withdrawals through RelayDepository totaling over $110,000 in stablecoins within one month. The funding address holds more than 350 transactions on Base. Carlos has not yet completed analysis of losses on other affected chains.