Fraudster’s Proceeds Drained After Storing Funds in Altered Hardware Devices
A cryptocurrency scammer lost approximately 60 BTC, worth around $4.8 million, after depositing proceeds into compromised Ledger hardware wallets, according to analysis reported in October by Bitcoinist.
The original scheme persuaded victims to deposit money under the promise of earnings from simple online activities. The scammer stored the fraudulent proceeds in wallets associated with Ledger hardware devices. A second group of thieves then drained the funds to an attacker-controlled address, exploiting vulnerabilities in the compromised devices.
The theft highlights a supply-chain risk distinct from manufacturer defects. Some hardware wallets circulating through third-party sellers had been physically modified before reaching buyers. These alterations can undermine device protections by interfering with the recovery phrase or other sensitive information. The investigation did not prove that Ledger’s own manufacturing systems were compromised. Ledger has distinguished affected reseller channels from devices supplied through official channels.
Hardware wallets are designed to isolate private keys from internet-connected equipment, creating a security boundary that protects against remote theft. This protection is less useful, however, if an attacker has altered the device before the owner receives it. A compromised device can expose recovery phrases or private keys to the attacker during setup or operation, negating the isolation benefit.
The incident underscores a gap between device-level security and supply-chain integrity. Buyers who obtain hardware wallets from unauthorized resellers face elevated risk of pre-compromise. Ledger has not specified which third-party sellers were involved or how many devices were affected by physical modification.
