A Ledger wallet user, “Anchor Drops,” reported losing 10 Bitcoin (worth over $1 million) and $1.5 million in NFTs. The losses were traced back to a phishing attack from February 2022, where the user unknowingly signed a malicious transaction.
How It Happened
The phishing transaction, tagged “Fake_Phishing5443,” was linked to an Ethereum address. Experts say the attacker likely obtained the user’s recovery phrase, granting access to funds across multiple blockchains, including Bitcoin.
Unanswered Questions
While the NFT theft is tied to Ethereum, it’s unclear how the attacker accessed Bitcoin. Security firms speculate user error or additional vulnerabilities may be involved.
Security Reminder
Ledger and blockchain experts urge users to regularly review wallet permissions and exercise caution when signing transactions. Using a hardware wallet is essential, but understanding its use is equally critical.