TL;DR: A cryptocurrency scammer reportedly lost roughly 60 BTC, worth around $4.8 million, after depositing proceeds into compromised hardware wallets. The story forms part of a wider supply-chain attack involving modified Ledger devices.
Someone accused of stealing cryptocurrency from victims of an online employment scam appears to have suffered an expensive reversal: another group of criminals stole the proceeds.
According to analysis reported in October, roughly 60 Bitcoin linked to a fraudulent task scheme was moved into hardware wallets and then drained.
At the time, the Bitcoin was worth approximately $4.8 million.
Criminal Proceeds Meet Compromised Hardware
The original scam reportedly persuaded victims to deposit money under the promise of earnings from simple online activities.
The operator later used wallets associated with Ledger hardware devices to store the proceeds. Those assets were subsequently transferred to an attacker-controlled address.
The case emerged amid wider revelations that some hardware wallets circulating through third-party sellers had been physically modified before reaching buyers.
Such alterations can undermine a device’s protections by interfering with the recovery phrase or other sensitive information needed to control funds.
The investigation did not prove that Ledger’s own manufacturing systems were compromised. The company has distinguished affected reseller channels from devices supplied through official channels.
A Security Lesson With An Unusual Twist
A hardware wallet is intended to isolate private keys from everyday internet-connected equipment. But that protection is far less useful if an attacker has altered the device before its owner receives it.
The fact that the apparent victim of the second theft had allegedly stolen the funds first makes this case unusual. The practical lesson is familiar: device provenance, physical integrity and careful setup remain essential parts of cryptocurrency security.
Written by the News Desk and edited by Samuel Rae.