A major cryptocurrency theft has rocked the crypto community after 50 million yuan (approximately $6.9 million) in digital assets were drained overnight from a cold wallet acquired via TikTok.
The incident was first flagged during an emergency call and later confirmed by 23pds, Chief Security Officer at blockchain security firm SlowMist.
According to the investigation, the cold wallet had been compromised before it ever reached the buyer. The private key associated with the wallet was stolen during its creation process, enabling the attackers to eventually access and drain the assets. The funds were rapidly funneled through a mixing platform called Huiwang, effectively erasing the trail and making recovery extremely difficult.
In response to the breach, 23pds issued a stark warning to crypto investors: avoid purchasing cold wallets from unofficial sources, especially listings advertised as “brand new,” “unopened,” or offered at discounted rates on platforms like TikTok or other social media.
The SlowMist executive stressed that fake hardware wallets are increasingly common in online marketplaces and are often preconfigured to steal assets once funds are deposited.
The warning comes amid a surge in deceptive social media listings where wallets are advertised at prices slightly below the value of the assets inside. These offers are frequently used as bait by scammers to target unsuspecting investors.
This high-profile heist underscores the urgent need for crypto users to purchase cold wallets only through official, verifiable channels. As crypto adoption grows, so do sophisticated scams, and this latest case serves as a stark reminder that security shortcuts can result in devastating losses.
