$282 million in Bitcoin and Litecoin stolen in Trezor support impersonation scam
AI Market Summary
A $282m theft from a BTC/LTC holder via a Trezor-support impersonation highlights persistent social-engineering risk rather than wallet-software compromise. Rapid laundering through THORChain and conversion into XMR underscores cross-chain and instant-exchange rails that complicate recovery, though limited funds were frozen quickly. Near-term, this can pressure sentiment around self-custody security practices and elevate compliance scrutiny on bridges and swaps.
Impact level
● Medium
Affected assets
BTC/USDT+0.10%
AI Insight · BTC/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
ChainCatcher reported that a Bitcoin and Litecoin holder was duped into handing over a 12-word mnemonic phrase to attackers posing as Trezor support, leading to the loss of about $282 million in crypto assets—roughly $139 million in Bitcoin and $153 million in Litecoin. Blockchain forensics firm ZeroShadow said the theft was driven by social engineering rather than any breach of wallet software or private-key infrastructure.
ZeroShadow said the stolen funds were split within minutes using the THORChain cross-chain bridge, then swapped into Monero through instant exchange services. Its monitoring team identified and froze around $700,000 within 20 minutes.
The firm also noted that under the BIP39 standard, a 12-word mnemonic provides about 128 bits of entropy, while a 24-word phrase provides 256 bits. Separately, Chainalysis estimates that as much as 23% of all mined Bitcoin—millions of BTC—could be permanently inaccessible due to lost keys linked to forgotten seed phrases, damaged backups, or missing inheritance planning.
