Nano

Drops

Anchor

The cryptocurrency community has received yet another reminder to stay vigilant in the bull market as a hardware wallet user has reported massive losses, which have been linked to a phishing attack.
The crypto user, identified as “Anchor Drops” on X, took to the social networking platform on Dec. 13 to <a data-ct-non-breakable="null" href="https://x.com/anchor_drops/status/1867384126954979472" rel="null" target="null" text="null" title="null">report</a> personal losses of 10 Bitcoin (<a data-ct-non-breakable="null" href="https://cointelegraph.com/bitcoin-price" rel="null" target="null" text="null" title="null">BTC</a>) on their Ledger Nano S wallet.
In addition to the alleged loss of roughly $1 million in BTC, Anchor Drops said they lost $1.5 million worth of non-fungible tokens (NFT) stored in the same wallet.
The cryptocurrency community and Ledger have linked the incident to a phishing hack that occurred a few years ago but has only surfaced recently.
<h2 id="ledger-points-to-malicious-transactions-from-years-ago">Ledger points to malicious transactions from years ago</h2>
Ledger told Cointelegraph that Anchor Drops “seems to have been a victim of phishing and malicious transactions many years ago.”
The wallet manufacturer referred to an X post by community member KDean, who <a data-ct-non-breakable="null" href="https://x.com/kdean/status/1867393109962764445" rel="null" target="null" text="null" title="null">linked</a> the loss to a phishing transaction involving the hacked Ethereum address <a data-ct-non-breakable="null" href="https://x.com/anchor_drops/status/1867347101413265739" rel="null" target="null" text="null" title="null">shared</a> by Anchor Drops.
Tagged “Fake_Phishing5443,” the alleged phishing transaction <a data-ct-non-breakable="null" href="https://etherscan.io/txs?a=0xcb8343b134d73afbd9fb94efb71b4276e80d02ac&amp;ps=100" rel="null" target="null" text="null" title="null">occurred</a> on Feb. 22, 2022.
<figure>
 <img alt="Phishing, Ledger, Hackers, Hardware Wallet" src="https://s3.cointelegraph.com/uploads/2024-12/0193bff7-3b9e-756e-b25e-66a21689480d" title="">
 <figcaption style="text-align: center;">
 X user Anchor Drops claimed he lost 10 BTC and $1.5 million in NFTs stored on Ledger. Source: <a data-ct-non-breakable="null" href="https://x.com/anchor_drops/status/1867384126954979472" rel="null" target="null" text="null" title="https://x.com/anchor_drops/status/1867384126954979472">Anchor Drops</a>
 </figcaption>
</figure>
Several blockchain security platforms confirmed that the fishing transaction caught by KDean was the likely culprit of the losses.
“Blockchain evidence shows they signed a phishing transaction nearly three years ago, unknowingly granting approval to a malicious actor,” Hakan Unal, senior scientist at the blockchain security platform Cyvers, told Cointelegraph.
“The hacker remained dormant for years before eventually draining the wallet,” Unal said, stressing that the incident has nothing to do with Ledger itself. He added:
<blockquote>
 “We strongly encourage users to follow best practices and regularly review token approvals to ensure their assets remain secure.”
</blockquote>
<h2 id="questions-surround-bitcoin-loss">Questions surround Bitcoin loss</h2>
While the NFT losses were tied to Ethereum transactions, it remains unclear how the malicious activity extended to the user’s Bitcoin holdings.
“For the NFT, KDean’s comment can explain everything. But I don’t understand how the BTC is stolen,” Fuzzland’s lead security researcher Tony Ke told Cointelegraph.
<figure>
 <img alt="Phishing, Ledger, Hackers, Hardware Wallet" src="https://s3.cointelegraph.com/uploads/2024-12/0193bff6-931a-7446-ba0c-361fd078b228" title="">
 <figcaption style="text-align: center;">
 The phishing transaction “Fake_Phishing5443” occurred 1,019 days ago. Source: Etherscan
 </figcaption>
</figure>
Cyvers and Ledger suggested that a malicious transaction on Ethereum could have expanded to more blockchains within a wallet.
“If the phishing attempt also captured the user’s recovery phrase, the attacker could gain access to the wallet across all supported chains, including Bitcoin,” Cyvers’ Unal said.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/telegram-verification-bots-carry-crypto-stealing-malware" rel="null" target="null" text="null" title="null">Scammers are using Telegram verification bots to inject crypto-stealing malware</a>
“As we know, the user got phished when it comes to the ETH wallet, we can assume user error on the BTC side too,” a spokesperson for Ledger told Cointelegraph.
Following the incident, Ledger has strongly <a data-ct-non-breakable="null" href="https://x.com/Ledger/status/1867490393354645644" rel="null" target="null" text="null" title="null">advised</a> users to be vigilant while signing any transactions onchain.
“While using hardware wallets is crucial in terms of security enhancement, it’s equally important to understand every interaction with the wallet and make informed decisions,” Fuzzland’s Ke added.
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/bitcoin-dominance-crypto-predictions-bull-run-benjamin-cowen-hall-of-flame/" rel="null" target="null" text="null" title="null">Bitcoin dominance will fall in 2025: Benjamin Cowen, X Hall of Flame</a>

Ledger wallet user reports 10 BTC loss — Community blames phishing

Table of Contents

Cointelegraph

Other articles published on Dec 13, 2024

Polygon Community Pushes for Liquidity Proposal

XRP Surges to All-Time High, Becomes the Third Largest Cryptocurrency by Market Cap

SPX6900 Price Prediction: SPX Plunges 11% As This New PEPE Derivative Presale Charges Toward $14 ...

Best Crypto Slots Games You Can Play Online: Top Picks for 2024

Marking $5.9M in Presales: Is Qubetics the Best Investment, or Betting on Near Protocol and XRP W...

Coinbase delists Tether, other MiCA noncompliant stablecoins

Join our free newsletter for daily crypto updates!