Fraudster Loses $4.8M in Bitcoin to Hardware Wallet Thieves

A cryptocurrency con artist lost roughly $4.8 million in Bitcoin after falling victim to a widespread hardware wallet supply chain attack.

According to blockchain analytics firm Chainalysis, one of the biggest victims of the recent hardware wallet theft was a scammer. The individual had recently orchestrated a fraud to steal funds from others before having those same proceeds stolen.

Detailing how the operation worked, Chainalysis explained: “In this task scam, people were paid to fake sales and reviews of real items. Then a ‘negative balance’ appeared, and they were told to add their own money in order to get paid.”

The mastermind behind the deception successfully accumulated 60 Bitcoin before attempting to secure the illicit proceeds.

“On Sep 22, the person behind the scam moved the proceeds into three separate Ledger addresses,” Chainalysis reported. “On Oct 9, thieves emptied all three. One transfer each, into the same wallet. The wallet is reported as stolen funds.”

Elaborate Supply Chain Attack

The fraudster's loss was part of a massive organized crime operation targeting Paris-based hardware wallet manufacturer Ledger. According to the company, a criminal syndicate spent several months purchasing authentic devices and physically opening them to install concealed implants. These internal components were specifically designed to capture a user's recovery phrases during the initial setup process.

The tampered devices were then returned to circulation through a Southeast Asian reseller based in Malaysia, known as CryptoBilis. Ledger noted that the attackers developed comprehensive technical and logistical infrastructure, including servers to collect the stolen seed phrases and systems to drain and launder the digital assets.

Stressing the scale of the operation, reports detailed the attackers' commitment: “They were patient, they spent millions and they struck in one coordinated operation, draining wallets.”

Ledger has not publicly disclosed the total amount of money lost in the operation. However, independent blockchain investigator Specter stated that $86 million had been drained in the attack, while a separate report from the Financial Times estimated the total at approximately $90 million across digital assets last week.

Hardware Vulnerabilities

Ledger announced Thursday that it is working with law enforcement to “follow the funds and dismantle the attackers’ infrastructure.” The firm confirmed that no other vendors were targeted in the scheme, which it characterized as one of the most “sophisticated attacks” ever experienced in the digital asset industry. CryptoBilis has since halted the sale of all Ledger products.

The massive theft follows a similar wave of attacks on Bitcoin hardware sellers earlier this year. In July, users of the popular Coldcard hardware products were targeted in a distinct exploit. Criminals successfully stole nearly $120 million in Bitcoin from Coldcard users by taking advantage of a firmware bug. That flaw resulted in faulty seed generation, which ultimately allowed hackers to guess investor seedphrases and drain their wallets.