Binance-Linked Ledger Wallet Scam Exposes $86M in Crypto Losses

Background

Blockchain security firm PeckShield has identified a $3.89 million theft from Ledger hardware wallets, which was routed to Binance deposit addresses on the Tron network. The incident is part of a larger draining campaign, with estimated losses ranging from $86 million to $94.5 million.

The Attack

The attack targeted devices purchased from CryptoBilis, a Southeast Asian reseller of Ledger hardware. The devices were compromised due to unauthorized hardware modifications. The stolen funds were moved through a network of intermediary wallets and mixer services, making it difficult to track the origin of the funds.

Binance's Role

The stolen funds were deposited into Binance deposit addresses, which is a positive development for victims. However, the attack highlights the importance of centralized exchanges in tracing and recovering stolen funds. Binance has paused sales through CryptoBilis and advised affected users to adopt new security measures.

Tether's Response

Tether has moved to freeze addresses tied to the attack, which totals approximately $10 million in USDT. However, the attacker has anticipated this move and swapped some funds into USDD, a different stablecoin, to dodge Tether's freeze powers.

Investigation and Next Steps

The investigation is ongoing, and it is unclear how much of the estimated losses can be realistically traced or frozen. Ledger has confirmed that unauthorized hardware modifications were made in at least one of the compromised devices. The incident highlights the importance of security measures and the need for law enforcement and authorities to act on the flagged deposit addresses.