$282M Bitcoin and Litecoin Stolen in Hardware Wallet Social Engineering Scam
A single investor lost 1,459 BTC and 2.05M LTC in what ZachXBT calls the largest individual crypto theft of 2026.
Blockchain investigator ZachXBT has uncovered a $282 million cryptocurrency theft, with a single victim losing approximately 1,459 Bitcoin and 2.05 million Litecoin to a hardware wallet social engineering scam.
What Happened
On January 10, around 23:00 UTC, an unknown crypto holder fell victim to a sophisticated social engineering attack targeting their hardware wallet. The attacker gained unauthorized access and drained approximately 1,459 BTC (roughly $140 million) and 2.05 million LTC (approximately $142 million) within hours.
ZachXBT, a prominent on-chain investigator, first detailed the incident in a security alert, tracing the stolen funds as they moved across multiple blockchain networks. The theft represents the largest individual crypto heist reported in 2026.
Why It Matters
The attacker immediately began laundering the stolen assets by converting them to Monero (XMR) through instant exchanges, causing a sharp spike in Monero's price as hundreds of millions in stolen funds flowed through privacy-focused channels. Additionally, approximately 818 BTC (roughly $78 million) was bridged to Ethereum, XRP, and Litecoin via THORChain to further obscure the trail.
This theft surpasses the previous record for individual social engineering theft of $243 million set in August 2024, when attackers targeted a Genesis creditor. ZachXBT noted no indications linking this attack to North Korean hacking groups.
What to Watch
The victim's identity remains unknown, as does whether the funds belonged to an individual or organization. Common hardware wallet attack vectors include phishing websites capturing seed phrases, fake customer support impersonating wallet companies, and malicious firmware updates. Investigation continues, with ZachXBT actively tracking fund movements.
Key Takeaways
This is a developing story. The incident highlights the persistent threat of social engineering attacks, even against hardware wallet users who typically represent more security-conscious holders.
