A crypto user lost over $282 million in Bitcoin and Litecoin after being tricked in a hardware wallet scam. This is one of the biggest personal crypto thefts ever.
Instead of hacking exchanges, criminals targeted the individual directly using psychological tricks, showing that human error can be a major risk in crypto security.
The attackers convinced the victim to approve fake transactions, even though the funds were in a secure hardware wallet.
After stealing the crypto, they quickly converted it into other currencies to hide the money. This case highlights the growing danger of social engineering scams in the crypto world.
How the Hack Happened:
On January 10, 2026, at around 11 PM UTC, a crypto user lost millions after being tricked by scammers. The attackers did not hack the wallet technically; instead, they used social engineering, a method that manipulates people into making mistakes.
They convinced the victim to approve fake transactions from their hardware wallet, which is usually very secure. This shows that even the safest wallets can be vulnerable if users are not careful.
Human error is often the weakest link in crypto security. The scam highlights the importance of double-checking transactions and being cautious with anyone requesting wallet approvals or sensitive information.
Hackers Launder Stolen Crypto Using Monero
After stealing Bitcoin and Litecoin, the attackers quickly converted the funds into Monero, a cryptocurrency known for privacy. They used instant exchange platforms to make the swaps fast and efficient.
Monero is different from Bitcoin or Litecoin because it is privacy-focused, which means the details of transactions are hidden. This makes it very hard for investigators to track the stolen funds.
The conversion also affected Monero’s market: since Monero usually has lower trading volume, swapping such a large amount caused its price to jump over 60% in a short time. This shows how criminals can move and hide large sums of crypto quickly.
Using Cross-Chain Tools and Wallets:
According to ZachXBT, the attackers used THORChain, a decentralized and permissionless cross-chain platform, to move stolen Bitcoin across Ethereum, Ripple, and Litecoin networks. This allowed them to launder funds quickly without needing any identity checks.
Stolen Assets Breakdown:
- 818 BTC (~$78M)
- Ethereum (19,631 ETH, ~$64.5M)
- 3.15M XRP (~$6.5M)
- 77,285 LTC (~$5.8M)
ZachXBT identified three main wallet addresses connected to the theft, receiving 1459 BTC and 2.05 million LTC, confirming the massive scale:
Bitcoin Wallet: bc1qluxw46r55wf3dnk9c652vrt4duadm3hpuktf86
Bitcoin Wallet: bc1qpsmh26ja0fzzf286zulmt9eywujc2pggj40wzm
Litecoin Wallet: ltc1qly43c2prj4c2e85dcspzpjd36jnapnenldnr70
Investigators think the scammers are not done moving the stolen money. Most of the Bitcoin is still in a wallet, probably waiting until people stop watching.
Why This Scam is Bigger Than Most:
This $282 million crypto theft is bigger than many past hacks, including the $243 million crypto hack in 2024. Instead of attacking big companies or exchanges, the criminals targeted one person.
They didn’t hack any software or systems. They tricked the victim using social engineering, making them approve fake transactions. This shows that even secure wallets can be unsafe if users are not careful.
Crypto holders need to be alert, always check transactions, and follow good security steps. Being careful and aware is very important to avoid losing money to these kinds of scams.
