Task Scammer Loses Nearly $5 Million in Bitcoin During Major Ledger Device Theft
A perpetrator of a task scam fell victim to a sophisticated hardware wallet theft scheme, losing 60 bitcoins in a series of targeted attacks.
Task Scammer Loses Nearly $5 Million in Bitcoin During Major Ledger Device Theft
A perpetrator of a task scam fell victim to a sophisticated hardware wallet theft scheme, losing 60 bitcoins in a series of targeted attacks.
Poetic Justice in Recent Ledger Theft
A perpetrator behind an illicit task scam has fallen victim to the very industry vulnerabilities they sought to exploit, losing nearly $5 million in bitcoin during last week's Ledger theft. According to a post by blockchain analytics firm Chainalysis, the individual lost 60 bitcoins valued at approximately $4.8 million.
The stolen funds originated from a con where victims were paid to fake sales and reviews of real items, only to be robbed after depositing their own money to secure payouts. The mastermind behind the scheme subsequently moved the ill-gotten proceeds into three separate Ledger addresses on September 22.
Sophisticated Supply Chain Attack
The stolen funds were ultimately drained on October 9 when thieves emptied all three addresses in a single transfer each into the same wallet, which has been flagged for holding stolen assets. Paris-based hardware wallet manufacturer Ledger launched an investigation after customers in South East Asia reported missing funds following purchases from a Malaysia-based reseller named CryptoBilis.
According to Ledger, the incident involved an organized crime operation where attackers installed physical implants into devices before returning them to the market. These hidden modifications allowed the criminals to read user seed phrases and drain wallets. While Ledger has not officially disclosed the total amount stolen in what it describes as one of the digital asset industry's most sophisticated attacks, blockchain investigator Specter estimated total drains at $86 million.
Broader Hardware Security Concerns
In response to the security breach, CryptoBilis has halted the sale of Ledger products, and Ledger announced it is actively collaborating with law enforcement to track the funds and dismantle the infrastructure used by the attackers. The company also confirmed that no other vendors were targeted by the scammers.
Hardware security has remained a persistent challenge for digital asset users throughout the year. Earlier in July, popular Coldcard hardware products faced a major attack where a firmware bug led to faulty seed generation, allowing hackers to approximate investor seed phrases and steal close to $120 million in bitcoin.
About The Author
