$282 million in Bitcoin and Litecoin stolen via Trezor impersonation scam

iconChaincatcher
Share
AI summary iconSummary
Bitcoin breaking news: A user was deceived by a Trezor support scam and shared their 12-word seed phrase, resulting in a $282 million theft of Bitcoin and Litecoin. The attackers used the THORChain bridge to transfer the funds and convert them into Monero. ZeroShadow confirmed this was a social engineering incident, not a security vulnerability. The company successfully froze $700,000 in stolen Bitcoin within 20 minutes.

ChainCatcher reports that a Bitcoin and Litecoin holder provided a 12-word mnemonic phrase to attackers impersonating Trezor support staff, resulting in the theft of approximately $282 million in assets, including about $139 million in Bitcoin and $153 million in Litecoin. Blockchain forensic firm ZeroShadow stated that the incident stemmed from a social engineering attack, not a compromise of wallet software or private key infrastructure. The stolen funds were split within minutes via the THORChain cross-chain bridge and converted into Monero through instant exchange services. ZeroShadow’s monitoring team identified and froze approximately $700,000 in funds within 20 minutes. Under the BIP39 standard, a 12-word mnemonic phrase contains approximately 128 bits of entropy, while a 24-word phrase contains 256 bits. Chainalysis estimates that up to 23% of all mined Bitcoin—amounting to millions of BTC—may be permanently inaccessible due to lost keys, caused by forgotten mnemonic phrases, damaged backups, or lack of inheritance planning.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.