Hardware Ready Ready to Bench?
According to reports by CoinDesk, confirmed by Chainalysis analysis, an individual known for conducting scams through fake online job listings has become one of the main victims of the recent exploit that hit French company Ledger’s hardware wallets. The definitive loss of funds took place on October 9, 2026, when the criminals emptied the compromised wallets. The Ledger bitcoin theft cost him about $4.8 million.
Why it matters
This case highlights a new dimension of risk in cryptocurrency custody: even those who accumulate capital from illicit activities are not immune to sophisticated technical attacks. The discovery, made public by Chainalysis analysts, shows how organized crime is using combined physical and digital methods to intercept users’ private keys. For the market, this incident underscores the importance of secure hardware device supply chains and the residual vulnerability linked to the physical distribution of wallets, while also highlighting the complexity of blockchain investigations that can trace fund flows even when the victims are themselves criminal actors.
The numbers
Available sources report slightly different data on the exact amount lost by the victim. CoinDesk indicates an approximate figure of nearly 5 million dollars, while Decrypt and Bitcoin Magazine specify an estimated value of 4.8 million dollars, corresponding to about 60 bitcoin. According to blockchain investigator Specter, cited by Bitcoin Magazine, the total funds drained in the entire attack on Ledger could reach 86 million dollars. The proceeds from the original scam had been transferred to three Ledger addresses on September 22; on October 9, the thieves moved all the bitcoin into a single wallet flagged as stolen.
What remains unclear
To date, the exact total amount of overall losses from the attack has not yet been revealed by Ledger, which relies on third-party estimates. Furthermore, although it has been confirmed that Malaysian retailer CryptoBilis has ceased selling Ledger products and that the company is cooperating with law enforcement, specific details regarding the identity of the criminal group responsible for installing malicious implants in the devices remain under investigation. It is also worth noting that a separate incident involving Coldcard users occurred in July, linked to a firmware bug, but this is not directly connected to the Ledger episode.
Sources: CoinDesk, Decrypt, Bitcoin Magazine.
This article is for information purposes only and does not constitute financial advice or an investment recommendation.
* Content created with the assistance of artificial intelligence systems.