
A Bitcoiner lost 783 BTC—valued at $91 million—in a single transaction after falling victim to a social engineering attack.
Blockchain investigator ZachXBT revealed that the attacker impersonated support staff from an exchange and a hardware wallet provider to gain access to the victim’s funds.
Details of the attack
According to blockchain data, the theft occurred on Tuesday at 11:06 am UTC.
The stolen bitcoin was quickly moved to a privacy-focused Wasabi Wallet, with laundering activities starting the following day.
Social engineering attacks like this involve deceiving individuals into revealing sensitive information, such as private keys or passwords, ultimately leading to loss of funds. ZachXBT advised:
“Assume that every call or email received is a scam by default.”
Suspects and laundering tactics
While ZachXBT did not identify specific suspects, he ruled out the North Korean Lazarus Group.
The attacker initially received the funds at a clean address before attempting to obscure the trail using Wasabi Wallet’s privacy features.
Notably, the attack happened exactly one year after the $243 million Genesis creditor theft.
Impersonation of hardware wallet providers
Scammers have increasingly impersonated hardware wallet companies such as Ledger and Trezor.
In April, fraudulent actors sent letters claiming to be from Ledger, urging users to provide their recovery seed phrases under the pretense of a security update.
These tactics have targeted both experienced investors and less tech-savvy individuals.
Crypto theft remains widespread
Blockchain security firm CertiK reported that over $2.1 billion has been stolen in bitcoin-related attacks in the first five months of 2025, with major incidents including the $1.4 billion Bybit exploit.
The majority of losses stem from compromised wallets and phishing attacks, underscoring the ongoing risks in the industry.