- Hackproofing.com
- Posts
- šø $40M BITCOIN STOLEN IN PHISHING-LEDGER ATTACK
šø $40M BITCOIN STOLEN IN PHISHING-LEDGER ATTACK
A Single Click Led to One of the Biggest Personal BTC Thefts Ever Recorded
Don't miss crypto's most influential event
Consensus is the worldās longest-running gathering of the global crypto, blockchain, and AI communities.
Curated by CoinDesk and celebrated as āThe Super Bowl of Blockchainā, Consensus will host North Americaās biggest industry-wide event in Toronto this May 14-16. This flagship festival will welcome 20,000 builders, investors, policymakers, and pioneers shaping the future of the decentralized digital economy.
Ready to invest in whatās next? Consensus is your best bet to unlock market-moving intel, make meaningful connections and get business done. You canāt afford to miss it.
Seeking impartial news? Meet 1440.
Every day, 3.5 million readers turn to 1440 for their factual news. We sift through 100+ sources to bring you a complete summary of politics, global events, business, and culture, all in a brief 5-minute email. Enjoy an impartial news experience.
A hacker has stolen over 521 BTC (~$40 million) from a Ledger hardware wallet, highlighting just how vulnerable even āsecureā storage can be when personal data is compromised. Hereās how it happened:
The attack started with a phishing email claiming the victim was ādead,ā prompting him to enter his Google credentials.
Hacker allegedly used the compromised account to initiate Ledgerās recovery process, armed with personal data.
Despite the victim never signing up for Ledger Recover, the attacker managed to drain the full BTC balance the next day.
Stolen funds were split across 197 private wallets and 140 exchanges in 668 transactions.
Victim has filed a lawsuit and the court has issued a temporary restraining order to freeze the stolen BTC across named exchanges.
READ HERE:
On February 27, a hacker stole 521.99931468 bitcoin ($40 million) from a Ledger wallet. The victim just sued the unknown hacker as well as exchanges where stolen funds were sent. How did this happen? Letās take a look.
ā Mallard Beakman āæā”š„ (@Bill_Fowler_)
9:36 PM ⢠Mar 14, 2025
š Zero Trust on Ledger
TLDR: It's not 100% clear to me how this attack was pulled off, but I don't trust @Ledger at all.
ā Mallard Beakman āæā”š„ (@Bill_Fowler_)
11:55 PM ⢠Mar 14, 2025
@Ledger Yeah, I'm thinking that they got his ID from Google.
I'm thinking that not using Ledger also would have prevented this. Your seed phrase shouldn't be susceptible to identity fraud.
ā Mallard Beakman āæā”š„ (@Bill_Fowler_)
12:12 AM ⢠Mar 15, 2025
Crazy story. All I can say is Ledger support is absolutely abysmal, don't use it.
ā pixelmagic (@pixelmagic_cc)
12:47 AM ⢠Mar 15, 2025