A Bitcoiner lost $91 million in a single transaction to a social engineering attack on Tuesday, with funds then sent to a privacy-focused Bitcoin wallet, according to blockchain investigator ZachXBT.
The victim was deceived by impostors posing as crypto exchange and hardware wallet support, losing 783 Bitcoin (BTC) in a single transaction, ZachXBT said in an X post on Thursday.
Blockchain data shows the theft occurred on Tuesday at 11:06 am UTC, and the exploiter started laundering the stolen funds a day later through the Bitcoin privacy-focused Wasabi Wallet to conceal the trail of the stolen funds, ZachXBT said.
Social engineering attacks involve attackers tricking people into revealing sensitive information, such as their private keys or passwords, allowing attackers to steal the funds. These exploits have been rampant in crypto, targeting everyone from sophisticated crypto investors to the elderly.
Asked how one can avoid being socially engineered, ZachXBT said to assume every call or email received is a “scam by default.”
ZachXBT said the hack occurred exactly one year after the $243 million Genesis creditor theft.
While ZachXBT didn’t name any suspects, he ruled out the notorious North Korean state-backed Lazarus Group as a potential culprit.
The attacker received the funds at a clean Bitcoin wallet address — ‘bc1qyxyk’ — before using Wasabi Wallet’s privacy features to try to conceal them.
Scammers have frequently impersonated crypto hardware wallet providers such as Ledger and Trezor using sophisticated methods.
In late April, scammers impersonating Ledger sent out letters posing as the company, asking users for secret recovery phrases to crypto wallets in an attempt to take control of the device.
They claimed a “critical security update” needed to be performed on their devices and that failure to comply may “result in restricted access to your wallet and funds.”
Related: Small setups, big wins: Is solo Bitcoin mining making a comeback?
In the same month, an elderly US citizen lost over $330 million worth of Bitcoin to a social engineering attack, sending shockwaves through the industry.
More than $2.1 billion was stolen from crypto-related attacks across the first five months of 2025, with the bulk of losses coming from wallet compromises and phishing attacks, blockchain security firm CertiK said in June.
The largest incident by far was the $1.4 billion exploit of crypto exchange Bybit in February, highlighting that even large, extensively audited crypto platforms remain at risk.
