Ledger Wallet Drain Leaves $4.8M Scammer in the Dust
Key Summary
A suspected scammer lost $4.8 million in a Ledger wallet drain, highlighting the importance of custody and supply chain security in the cryptocurrency industry. The incident is part of a wider $100 million Ledger theft, with losses estimated at $86 million across Ethereum, TRON, and Bitcoin. The scammer's loss is a rare instance of a scammer being robbed, underscoring the need for robust security measures to prevent such scams.
The Widening Ledger Scam
Ledger wallet drain leaves $4.8M scammer in the dust
A suspected scammer who lost roughly $4.8 million in a Ledger wallet drain has become the unlikely face of the wider $100 million Ledger theft.
How a Scam's Proceeds Ended Up Drained
A task scam dangles easy money for simple online jobs, then demands deposits before any payout arrives.
According to Chainalysis, they were paid to fabricate sales and reviews for real products. Then their balances turned negative, and they were told to deposit their own money to unlock payouts. The operator moved the proceeds into three separate Ledger addresses on September 22, where the money sat until it was taken.
The Scammer's Haul Was Swept Out from Under Them
On October 9, those addresses were emptied in single transfers into one wallet already flagged for holding stolen funds.
The scammer's loss is what makes the story more than a footnote. Chainalysis revealed it while tracing the wider Ledger drain, showing how stolen money often moves through addresses that already show a history of theft.
The Bigger Picture
The scammer's loss is only part of the story.
Ledger's wider drain has affected devices sold through CryptoBilis, a reseller operating in Malaysia, Indonesia and the Philippines. Ordinary buyers paid the real price. Starting around October 9, users who bought devices from the shop reported drained wallets. Early estimates topped $86 million across Ethereum, TRON and Bitcoin.
The Supply Chain Matters
Ledger warned anyone who bought from CryptoBilis in the prior 90 days not to set up their devices.
Buyers who had already set up were told to move funds to a new seed. The lesson for users is that the supply chain matters as much as the code.
The Fallout
Ledger says confirmed losses remain limited to Southeast Asia, and European spot-checks, including those in Germany, found no tampered stock.
Meanwhile, Tether has frozen roughly $10 million in USDT, while Chainalysis maps laundering through Tornado Cash, Zcash, bridges, and stablecoin conversions.