Ledger hacked | Bitcointalksearch.org

Forsyth Jones

hero member

Activity: 1120

Merit: 540

Duelbits - Play for Free | Win for Real

Quote from: Cricktor on September 27, 2024, 05:51:27 PM

A lot of details aren't presented by OP. I've some immediate questions which haven't been confirmed by OP's presentation of his case.

Which wallet software did show zero balance? Was it properly synced and has this been verified (see also next question)?
We all know that Ledger Live is a real piece of shit software that sometimes has some real bad sync issues.

-skip-

The OP's lack of details makes the case even harder to help, since the OP says he was robbed, but at no point did he provide the TXID of the transaction or any output address, so you may be right.

OP Either you exposed your recovery seed online at some point on a computer with malware, or someone had access to your backup, a passphrase would mitigate this attack if that's the case.

Have you spread your recovery seed backup elsewhere? Someone could have physically accessed it and you never knew! That's why using passphrases is important, but I think this case may be a bit unlikely.

Cricktor

hero member

Activity: 714

Merit: 1010

Crypto Swap Exchange

A lot of details aren't presented by OP. I've some immediate questions which haven't been confirmed by OP's presentation of his case.

Which wallet software did show zero balance? Was it properly synced and has this been verified (see also next question)?
We all know that Ledger Live is a real piece of shit software that sometimes has some real bad sync issues.

Are there transactions visible on block explorers that confirm stealing/emptying OP's funds?
I mean that should be an obvious check to make first. OP doesn't say anything about it. Don't assume, verify!
Valuable time is wasted without following flow of funds...

Are the mnemonic recovery words stored in only one place? If one place, who has access to this place?

If there exist multiple backups in different places, who may have access to all of the places?

Did you receive any authentic looking emails which pretend to come from Ledger company?

I can probably come up with more questions, but to shed more light into this case, I would like to have the above stated answered first.

Stalker22

legendary

Activity: 1526

Merit: 1359

Quote from: Mrkizgb on September 17, 2024, 07:05:54 AM

There is absolutely zero chance of that because i never used that seed phrase, never, and never stored it amywhere beside on ghe piece of paper. I have no idea what happened. And right now that is not my primary concern. Police report is filed but I have no hopenin that. What I am looking for is for somebody who can track such things and help me freeze it on some exchange if that is possible, I am also seeking legal help locally, but technical part I dont have. If somebody is capable and willing to do so please contact me. Yoi will not br helping for free, thatbI guarantee. Advice about internet security I dont need, I am dealing with crpto for 10 years and and with computers for 30 and nkw jow to keep myself safe. This is an incident for which I need help.

Yes. There are professionals who specialize in analyzing blockchain transactions to potentially identify where stolen funds went. They use sophisticated tracking techniques to follow the money trail and however, their services are expensive and even if they locate the funds, actually recovering the assets can be extremely difficult. There is no guarantee of freezing or recovering them without law enforcement involvement.

I recommend consulting with a reputable cybersecurity expert or a lawyer who specializes in crypto-related legal matters. They can provide you with more accurate information and advice on your specific situation.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: Mrkizgb on September 17, 2024, 06:20:38 AM

I just got hacked, Ledger wallet, stolen BTC and ETH.
Anyone who can help retreive funds, all help is appreciated. Reward in terms of percentage of retrieved funds is absolutely possible.

Yeah sure, let me just check my crystal ball to see what really happened here Roll Eyes

I am not defending ledger as a company or their devices but it is more likely that your seed words got leaked or stolen.
You didn't say if you wrote them on paper or in digital form, but ''hacker'' don't need to have physical access to your devices if he has your keys.
There is a chance for potential hack only if you signed up for ledger recover services, but that is a paid feature.

satscraper

hero member

Activity: 714

Merit: 1298

Quote from: Mrkizgb on September 17, 2024, 06:20:38 AM

I just got hacked, Ledger wallet, stolen BTC and ETH.
Anyone who can help retreive funds, all help is appreciated. Reward in terms of percentage of retrieved funds is absolutely possible.

Could you elaborate your case a bit more? Ledger device comes in a few flavors - nano x, s, s+ and so on. Which one is yours? Did you share with them your SEED via their controversial Ledger Recover payed service for its custodial backup? Did you extended you SEED with passphrase and if you did, then, how this passphrase was kept by you, separately from SEED or not?

Pmalek

legendary

Activity: 2730

Merit: 7065

I wonder if a person can contact blockchain analysis companies in situations when crypto gets stolen/hacked and ask them for assistance? In theory, that should be possible. They will surely ask for a fee to conduct their research, but at least there is a chance that they do something productive instead of coming up with arbitrary rules and definitions about "dirty" coins that is based on nothing.

tabas

hero member

Activity: 3234

Merit: 775

🌀 Cosmic Casino

Quote from: Z-tight on September 18, 2024, 10:51:42 AM

Quote from: Mrkizgb on September 17, 2024, 07:05:54 AM

What I am looking for is for somebody who can track such things and help me freeze it on some exchange if that is possible

Only law enforcement can order custodial and centralized services to freeze funds deposited in their platform, a random person cannot do that, so if that is what you are looking for, report to the authorities, but there is a high chance they would not pay any attention to your case i'm afraid.

He may only be able to do this if he's able to track where his funds went through. But it could also be too late for him to track it down when the culprit was already able to transfer it multiple times and increase his/her privacy. Thus, the special treatment and expedited process to give this kind of order to these centralized services will only be recognized if it's coming from a known person or someone who's got a huge fund that they may commission afterward, the possibility is there but chances are pretty low that a random guy will be able to do this. I'm afraid that OP might not be able to satisfy himself with any of these possibilities as transactions moving to and fro are too quick for him to track. Unless, if he's too quick to track it(unlikely) and became a stablecoin like USDT for which there were some cases that they're able to freeze the funds from criminals.

m2017

legendary

Activity: 1792

Merit: 1296

Playbet.io - Crypto Casino and Sportsbook

Quote from: Mrkizgb on September 17, 2024, 06:20:38 AM

I just got hacked, Ledger wallet, stolen BTC and ETH.
Anyone who can help retreive funds, all help is appreciated. Reward in terms of percentage of retrieved funds is absolutely possible.

There is too little information about the incident to understand where the danger vector comes from: whether from the Ledger manufacturer or any other. The author needs to conduct a more detailed investigation and try to find out why exactly this happened. Well, the company would not rob its customers "specifically". If Ledger ever does something like this, it will be a mass phenomenon. And as they said during the discussion of this topic, most likely, the user himself made a "mistake" somewhere that led to the theft of his savings on the ledger hardware wallet. Therefore, statements about "Ledger hacked" remain premature and unfounded without detailed evidence (sorry, true ldger haters, but that's exactly it).

Z-tight

legendary

Activity: 994

Merit: 1089

Wheel of Whales 🐳

Quote from: Mrkizgb on September 17, 2024, 07:05:54 AM

What I am looking for is for somebody who can track such things and help me freeze it on some exchange if that is possible

Only law enforcement can order custodial and centralized services to freeze funds deposited in their platform, a random person cannot do that, so if that is what you are looking for, report to the authorities, but there is a high chance they would not pay any attention to your case i'm afraid. Can you post the transaction id of the outgoing transaction that was made by the scammer, that is if you are not worried about the privacy concern.

hd49728

legendary

Activity: 2044

Merit: 1018

Not your keys, not your coins!

Quote from: Pmalek on September 18, 2024, 07:11:50 AM

Hardware wallets are constructed in such a way that even if the PC is infected with malware, they couldn't steal your coins from you remotely. Don't forget that you need physical confirmation with button presses on the device before you can broadcast transactions. But malware can find seeds and private keys. Clipboard malware can change addresses

Hardware wallets are good for cryptocurrency fund storage but only if people purchased hardware wallets a right way and use these wallets a right way too.

Choose open source hardware wallet, backup wallet seed a right way, and use it a right way.
Open Source Hardware Wallets
[GUIDE] How to buy a Hardware Wallet the right way
back up a seed phrase a right way
Hardware wallets can steal your seed!
Attack vectors for Hardware Wallets

Pmalek

legendary

Activity: 2730

Merit: 7065

Quote from: serjent05 on September 17, 2024, 09:45:53 AM

I am sorry to hear what happened, have you think the possibility of your PC being infected? Because it is either your PC is infected...

Hardware wallets are constructed in such a way that even if the PC is infected with malware, they couldn't steal your coins from you remotely. Don't forget that you need physical confirmation with button presses on the device before you can broadcast transactions. But malware can find seeds and private keys. Clipboard malware can change addresses, but OP isn't claiming that he sent his coins and they ended up in the wrong address. He just noticed an empty balance one day.

Quote from: serjent05 on September 17, 2024, 09:45:53 AM

Have you played with your ledger and try to downgrade or update it?

Downgrading Ledger firmware isn't possible from what I know. You can only upgrade. That doesn't explain the disappearance of the crypto.

Cryptomultiplier

sr. member

Activity: 980

Merit: 237

Quote from: Kruw on September 17, 2024, 06:26:48 AM

Quote from: Mrkizgb on September 17, 2024, 06:20:38 AM

I just got hacked, Ledger wallet, stolen BTC and ETH.
Anyone who can help retreive funds, all help is appreciated. Reward in terms of percentage of retrieved funds is absolutely possible.

Since a Ledger is a hardware wallet, it limits the scope of attacks that can affect you. Most likely, the point of failure was the way you stored your recovery seed. However, since Ledger is closed source software, you will never be able to rule out the possibility that it was an inside job.

The possibility of it being an inside job isn't far-fetched or it could also be due to careless management, monitoring and a carefree adherence of security protocols.

I have read some articles on how good hackers can retrieve or use brute force techniques to have access into a locked wallet and if it were possible to retrieve a hacked account with stolen funds, then am sure you would learn more if you visit this link and learn for yourself.

https://cointelegraph.com/magazine/hackers-crypto-wallets-recover-savings/

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: Mrkizgb on September 17, 2024, 07:05:54 AM

There is absolutely zero chance of that because i never used that seed phrase, never, and never stored it amywhere beside on ghe piece of paper. I have no idea what happened. And right now that is not my primary concern. Police report is filed but I have no hopenin that. What I am looking for is for somebody who can track such things and help me freeze it on some exchange if that is possible, I am also seeking legal help locally, but technical part I dont have. If somebody is capable and willing to do so please contact me. Yoi will not br helping for free, thatbI guarantee. Advice about internet security I dont need, I am dealing with crpto for 10 years and and with computers for 30 and nkw jow to keep myself safe. This is an incident for which I need help.

For someone who has been working with computers for 30 years, you don't seem like that at all. It's obvious that you don't know to protect yourself, because if you knew then you wouldn't ask for help from complete strangers - you would remember that you act in such a way that all known CEXs would already have your letter with a detailed description of what happened and all the details, and you could hope that the hacker is stupid enough to try to sell the stolen coins in that way.

If you really became a victim, ask yourself only two things - could anyone get into the possession of your backup (seed) or into the physical possession of your hardware wallet? Everything else is conspiracy theories.

Aanuoluwatofunmi

sr. member

Activity: 812

Merit: 436

Quote from: Mrkizgb on September 17, 2024, 06:20:38 AM

I just got hacked, Ledger wallet, stolen BTC and ETH.
Anyone who can help retreive funds, all help is appreciated. Reward in terms of percentage of retrieved funds is absolutely possible.

You're not giving any information on how your bitcoin and Ethereum was hacked, it would have been better if you can send something like the transaction id for more information on it, then you're not also giving any information about how it all happened.

let me just remind you incase you're forgetting, bitcoin transactions are irreversible once it has been confirmed, the security of your wallet lies in your hands, if you can endure and to protect yourself, you're free.

HajiBagi

sr. member

Activity: 756

Merit: 353

Quote from: Pmalek on September 17, 2024, 06:55:37 AM

What did you do?

Despite Ledger being closed-source and no longer a recommended wallet, people who own them don't magically get hacked and have their wallets emptied. I think that one of two things happened: You entered your seed phrase somewhere online or in a fake software that was emailed to you and you believed it to be genuine or someone got hold of your recovery phrase and took everything you own. A third scenario is possible, and that is that you imported your seed in a hot wallet, where again it could have been a scam wallet or you have malware and keyloggers on your system.

Unless you tell the complete story in full details, you and us we will never learn what really happened.
The transactions are irreversible. You can file a report with the police and track the flow of the coins. If they get deposited into a centralized exchange, there is a small possibility that the service will freeze them if you provide the right documentation.

That's what I'm also thinking because in this case now no one can help him to recover something that is being hacked and when it has been hacked I don't think his coin will be in the wallet again because immediately scammers hack your system and get into your wallet they will wipe everything and left you with nothing, from my observation maybe he login in someone phone or in a fake website where his wallet is being connected and they will have access to his wallet, this is why they many members of the forum always repeat that never click on any link and try as much as possible to protect your wallet by hiding your seed phrase because when your seed phrase enter anyhow that know much about cryptocurrency and he or she is into online stuff you are in big trouble, so with this your story now I don't think anyone can help to get who hack the ledger back to you safe without nothing missing in the wallet.

coolcoinz

legendary

Activity: 2814

Merit: 1192

Quote from: Dave1 on September 17, 2024, 08:00:10 AM

I wouldn't say it was hacked, probably it's more on a mistake on your side that give this hackers the change to steal your crypto. And as we can see, there's a lot of speculation as how they did it.

But since you are not sharing that much info, including the Bitcoin or Ethereum address, at least we can trace it as where the funds go. Maybe the criminals used a CEX as deposit address and so you can request them to freeze it for you.

You're probably right because I have a ledger wallet with the same balance. I don't remember the exact time I bought it but it had to be in 2019 or 2020 and everything is still there, even checked the wallet 5 min ago after reading OP.

99% problems when handling software and hardware wallets come from neglect and user mistake.

How is your seed phrase stored? How is the device stored?

serjent05

legendary

Activity: 3052

Merit: 1281

Get $2100 deposit bonuses & 60 FS

I am sorry to hear what happened, have you think the possibility of your PC being infected? Because it is either your PC is infected your ledger had been hijack by some one else. Have you played with your ledger and try to downgrade or update it? Or has your ledger information been phished? I know this won't help to retrieve your fund (because it is irreversible) unless you pinpoint the culprit but realizing why this thing happened may not only help you in the future but also the people reading this thread.

I second the statement that it is impossible to retrieve the hacked fund in your ledger. If someone DM you that they are capable of retrieving your funds, it is most likely a fraud and they are attempting to scam you into paying their fraud services. So I want to warn and be aware of this kind of scam attempt.

sunsilk

hero member

Activity: 3038

Merit: 634

Quote from: Mrkizgb on September 17, 2024, 07:05:54 AM

There is absolutely zero chance of that because i never used that seed phrase, never, and never stored it amywhere beside on ghe piece of paper. I have no idea what happened. And right now that is not my primary concern. Police report is filed but I have no hopenin that. What I am looking for is for somebody who can track such things and help me freeze it on some exchange if that is possible, I am also seeking legal help locally, but technical part I dont have. If somebody is capable and willing to do so please contact me. Yoi will not br helping for free, thatbI guarantee. Advice about internet security I dont need, I am dealing with crpto for 10 years and and with computers for 30 and nkw jow to keep myself safe. This is an incident for which I need help.

Maybe don't look far and try to recall if someone has been acting weird in your surroundings that you've talked about in relation of investments and crypto. This could be an inside job from whoever is close to you.

But even with that, unfortunately, no one is going to be able to recover that anymore. If the hacker has transferred it already and your wallet has been swept by him into zero balance, only in good fate is your chance if he'd return it back to you.

Other than that, I'm sorry for your loss.

Dave1

hero member

Activity: 1526

Merit: 555

I wouldn't say it was hacked, probably it's more on a mistake on your side that give this hackers the change to steal your crypto. And as we can see, there's a lot of speculation as how they did it.

But since you are not sharing that much info, including the Bitcoin or Ethereum address, at least we can trace it as where the funds go. Maybe the criminals used a CEX as deposit address and so you can request them to freeze it for you.

Pmalek

legendary

Activity: 2730

Merit: 7065

Usually when people lose their bitcoin, it's 9/10 because of a mistake they made. The other cases come from terrible choice of software. Ledger has made some awful business choices in recent years, their Ledger Recover feature (actually a vulnerability) is the icing on the cake. But I repeat, people aren't getting their Ledger's hacked all over the place. If that happened on a daily basis, crypto media would be all over it.

I don't have an explanation about how all of a sudden all your coins are gone and no mistakes happened on your end.
How do you store your seed and who could have potentially had access to it? Has anyone ever seen your seed words? Who knows where your Trezor is held and does anyone know its PIN?

Do you care to share the addresses where your Bitcoin and Ethereum went to? Keep it mind that doing that might be a privacy risk. Do it only if you are comfortable with it.

Topic: Ledger hacked (Read 383 times)