{"id":"hardware-wallet-282m-scam-jan-2026","category":"scam","status":"closed","title":"Hardware-wallet scam costs one crypto holder more than US$282 million","tldr":"ZachXBT reported that one holder lost over US$282 million in Bitcoin and Litecoin through a hardware-wallet scam. About US$700,000 was reportedly frozen, with no confirmed return. Keep recovery words private and verify support through the maker’s official site.","summary":"A single crypto holder lost more than US$282 million in Bitcoin and Litecoin on 10 January 2026, according to blockchain investigator ZachXBT, who disclosed the theft on 16 January. He described social engineering involving a hardware wallet and traced subsequent movements through exchanges and THORChain. The precise deception was not established in the supplied reports: Crypto.news called it unclear, while Cointelegraph attributed a more specific account to security firm ZeroShadow, saying an attacker impersonated Trezor support and obtained the victim’s recovery phrase. Cointelegraph also reported ZeroShadow’s claim that about US$700,000 was frozen. A freeze is not confirmation that the victim received money back. As at 3 November, the reviewed sources do not confirm returned funds, arrests or charges. No affected device models, software versions or incident-specific software fix were established. Hardware-wallet owners should protect their recovery words and independently verify anyone claiming to offer support.","action":"Never share your wallet recovery words or type them into a website at someone’s request. End unexpected wallet-support calls or messages, then contact the maker through its official website; Trezor’s guidance says to report suspected phishing through its support chatbot.","product":"Bitcoin and Litecoin held by one hardware-wallet user","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["crypto","bitcoin","litecoin","hardware-wallet","social-engineering","scam"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Scams and phishing — general hardware-wallet safety guidance","url":"https://trezor.io/learn/security-privacy/personal-security-standards/scams-and-phishing","by":"Trezor","date":""},{"kind":"post","title":"US$282 million Bitcoin and Litecoin hardware-wallet scam disclosure","url":"https://t.me/s/investigations/302","by":"ZachXBT","date":"2026-01-16"},{"kind":"news","title":"Monero hit an all-time high earlier this week, and crypto sleuth ZachXBT thinks he knows why","url":"https://www.theblock.co/news/regulation/2026-01-16-monero-hit-all-time-high-this-week-crypto-sleuth-zachxbt-thinks-he-knows-why-386014","by":"The Block","date":"2026-01-16"},{"kind":"news","title":"User loses $282M in one of the largest social engineering crypto heists","url":"https://www.tradingview.com/news/cointelegraph:d2aa4642d094b:0-user-loses-282m-in-one-of-the-largest-social-engineering-crypto-heists/","by":"Cointelegraph via TradingView","date":""},{"kind":"news","title":"$282M in Bitcoin and Litecoin stolen in hardware wallet social engineering scam","url":"https://crypto.news/282m-in-bitcoin-litecoin-stolen-hardware-wallet-scam/","by":"Crypto.news","date":"2026-01-17"}],"started":"2026-01-10","closed":"2026-01-17","created":"2026-11-03T20:31:37.491Z","updated":"2026-11-03T20:31:37.491Z","cve_notes":[],"timeline":[{"at":"2026-01-17","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"Crypto.news reported that the precise deception remained unclear. Its account therefore left more uncertainty about the method than the support-impersonation account attributed to ZeroShadow.","url":"https://crypto.news/282m-in-bitcoin-litecoin-stolen-hardware-wallet-scam/","by":"Crypto.news","patch":null},{"at":"2026-01-16","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"According to Cointelegraph, ZeroShadow said in a Friday statement that about US$700,000 was frozen within roughly 20 minutes of its being alerted. The firm attributed the theft to someone impersonating Trezor support and obtaining the victim’s recovery phrase; freezing funds did not establish their return.","url":"https://www.tradingview.com/news/cointelegraph:d2aa4642d094b:0-user-loses-282m-in-one-of-the-largest-social-engineering-crypto-heists/","by":"Cointelegraph via TradingView","patch":null},{"at":"2026-01-16","added":"2026-11-03T20:12:05.486Z","kind":"disclosed","text":"ZachXBT publicly reported the theft and said the attacker converted stolen assets into Monero and moved Bitcoin across other networks through THORChain. The Block said it could not independently establish the Monero conversions from the particular addresses it examined.","url":"https://www.theblock.co/news/regulation/2026-01-16-monero-hit-all-time-high-this-week-crypto-sleuth-zachxbt-thinks-he-knows-why-386014","by":"The Block","patch":null},{"at":"2026-01-10T23:00Z","added":"2026-11-03T20:12:05.486Z","kind":"other","text":"One victim lost more than US$282 million in Bitcoin and Litecoin through a hardware-wallet social engineering scam, according to ZachXBT. He identified 1,459 BTC and 2.05 million LTC in the theft.","url":"https://t.me/s/investigations/302","by":"ZachXBT","patch":"na"}],"url":"https://hard.fyi/live/hardware-wallet-282m-scam-jan-2026/","json":"https://hard.fyi/api/live?id=hardware-wallet-282m-scam-jan-2026"}