A late-night distress call has exposed a sizeable cryptocurrency heist, according to 23pds, chief security officer at blockchain-forensics firm SlowMist.
An investor who ordered a “sealed, brand-new” hardware wallet advertised on TikTok awoke to find roughly ¥50 million—about US $6.9 million—missing from the device.
Investigators say the private key had been captured during the wallet’s initial setup, allowing thieves to drain the funds and launder them through the platform Huiwang before disappearing without a trace.
23pds now warns that many “discount” or “special-promotion” cold wallets hawked on social media are counterfeit units pre-programmed to leak keys.
He estimates nearly every listing that undercuts official pricing has been tampered with. The only safe course, he stresses, is to buy hardware wallets directly from trusted manufacturers or authorized resellers, since scammers frequently entice victims by offering devices for slightly less than the crypto purportedly stored inside.
A new breed of cyber-attack is sweeping through crypto media, exploiting site pop-ups and wallet-connect prompts instead of smart-contract bugs.
CoinMarketCap, one of the most widely used crypto data tracking platforms, is reportedly facing a front-end security breach, with multiple users encountering a suspicious prompt to verify their wallets.
Russia’s attempt to formalize its crypto mining sector is falling short, with most miners opting to remain off the books despite new regulations.
A well-known investor at crypto VC firm Hypersphere has fallen victim to an elaborate phishing attack that wiped out a substantial portion of his personal savings.