On-Chain Detective ZachXBT: A certain wallet was stolen through "social engineering attack" involving $282 million worth of BTC and LTC

動區BlockTempo
BTC-0,52%
LTC0,1%
TRU8,93%

Blockchain detective ZachXBT reveals that a coin holder experienced a suspected hardware wallet social engineering attack in mid-January, losing over $282 million worth of Litecoin and Bitcoin in one go.
(Background: TrueBit protocol suspected hacking! 8,535 ETH transferred abnormally, $TRU instantly cut in half)
(Additional context: North Korean hackers set a record in 2025 by stealing $2.02 billion in cryptocurrency, with a money laundering cycle of about 45 days)

Independent on-chain investigator ZachXBT pointed out that around 11:00 PM UTC on January 10, a large-scale crypto asset theft occurred. A victim was suspected of falling for a social engineering scam related to hardware wallets, losing over $282 million worth of Litecoin (LTC) and Bitcoin (BTC).

Based on on-chain information compiled by this investigator, after the assets were stolen, the attacker began converting large amounts of LTC and BTC into Monero (XMR) through multiple “instant exchange” services, causing XMR prices to spike significantly in a short period.

Meanwhile, some Bitcoin was transferred across chains via Thorchain to networks like Ethereum, Ripple, and Litecoin, increasing the difficulty of tracking.

The stolen addresses exposed in this incident include approximately 2.05 million LTC and 1,459 BTC, marked as:

BTC: bc1qluxw46r55wf3dnk9c652vrt4duadm3hpuktf86

BTC: bc1qpsmh26ja0fzzf286zulmt9eywujc2pggj40wzm

LTC: ltc1qly43c2prj4c2e85dcspzpjd36jnapnenldnr70

This event demonstrates that even using hardware wallets, which are considered relatively secure self-custody tools, large assets can still be transferred and laundered quickly if targeted by sophisticated social engineering attacks during authentication, private key management, or customer support processes. Privacy coins and cross-chain mechanisms further enhance anonymity.

For professional and institutional investors, relying solely on “cold wallets” is no longer sufficient. Designing stricter manual procedures and permission controls will be a key focus in subsequent discussions of such incidents.

(##

Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to Disclaimer.

Related Articles

Bitcoin Drops Below $75K, Trading at $74,992 with 1.63% 24-Hour Decline

Gate News message, April 21 — Bitcoin (BTC) fell below the $75,000 mark, currently trading at $74,992.3 with a 24-hour decline of 1.63%.

GateNews2h ago

USDT supply hits fresh $188b ATH as Tether tightens grip on stablecoins

Tether CEO Paolo Ardoino says USDT supply has hit a record $188b, cementing the stablecoin's dominance as broader stablecoin liquidity sits near all-time highs. Summary Tether CEO Paolo Ardoino says USDT supply has reached a record $188 billion. The new peak comes weeks after stablecoins hit a

Cryptonews5h ago

Grayscale Research Head: Bitcoin Rally Above $76K Could Signal Start of Bull Market Phase One

Grayscale research head Zach Pandl analyzes Bitcoin's rebound from a February low, using the realized price metric to show recent buyers at breakeven and hint at an early bull phase, with a reported bottom around $65k-$70k. Grayscale’s Pandl: Bitcoin hit ~63k in Feb, rose to ~76k; realized price ~74k shows recent buyers breakeven, hinting at early bull phase and a bottom around 65-70k.

GateNews5h ago

Scammers Impersonating Iranian Officials Demand Bitcoin and USDT from Ships in Strait of Hormuz

Gate News message, April 21 — Scammers posing as Iranian officials are demanding Bitcoin (BTC) and Tether (USDT) as transit fees from ships in the Strait of Hormuz, according to a warning from MARISKS, a Greece-based maritime risk management firm. The scheme falsely promises "safe transit

GateNews6h ago

Bitcoin, Ethereum and Solana ETFs Record Positive Net Inflows on April 21

Gate News message, according to the April 21 update, Bitcoin ETFs recorded a 1-day net inflow of 3,599 BTC (approximately $272.59 million) and a 7-day net inflow of 18,914 BTC (approximately $1.43 billion). Ethereum ETFs showed a 1-day net inflow of 34,380 ETH (approximately $79.25 million) and a 7-

GateNews6h ago
Comment
0/400
No comments