pull down to refresh

Request for Analysis – Stolen Funds from Ledger / Trust Wallet
404 sats \ 8 comments \ @anon 21 Aug bitcoin
Complete Chronology – Ledger / Trust Wallet Case
  1. Background
Around 2018: purchase of the first Ledger Nano S.
The 24-word seed was written on paper and kept in different places over time (not always the same).
After a few years, the Ledger started showing display issues.
  1. Preliminary Events
End of June 2025: the Ledger display became unreadable.
July 4, 2025: a new Ledger was ordered from the official website.
Attempt to restore using the paper seed → “wrong recovery” error.
Also tested on Rabby Wallet and with the Ledger Recovery tool (not Trust Wallet) → always invalid.
Conclusion: the 2018 seed had been written incorrectly or incompletely.
  1. Ledger Repair
Early July 2025:
A replacement display was ordered from Alibaba (generic, non-certified vendor).
A technician in Pisa (Doppio Click store) replaced the display in about 5 seconds in front of me, with the Ledger turned off.
The Ledger remained physically open and the case was not closed again to avoid damaging components.
  1. Transfer of Funds
Immediately after the repair:
I moved to the back of a bar room, no one else was in the bar.
I used a new iPhone (purchased at Trony, with a new Apple ID, never used before for crypto).
I installed Trust Wallet and set a PIN.
I created a new wallet and wrote down the seed only on paper.
I transferred all funds from Ledger to Trust Wallet (except ETH in staking).
Connection used: personal hotspot, not public Wi-Fi.
No backup on iCloud and no screenshot of the seed.
The Ledger and the seed were hidden in a recess of the camper where I was staying for the summer at the campsite.
  1. Following Days
August 4 – 13, 2025: neither the Ledger nor Trust Wallet were used.
August 14 (morning):
I decided to move the funds to a Trezor (already ordered previously).
When turning on Ledger and Trust Wallet, the funds were already gone.
  1. Transactions Detected
Ethereum (from Ledger) TX: 0x8319fda9d016b48c122ed9c6f7c4164692e281737f37143680537aad742f5596 → Funds moved to a fresh wallet, partly staked.
Bitcoin (from Trust Wallet on iPhone) TX: 578f9054f66748ea4c65509b4d592f041c055a43c58423ede3ec8c563c1e48f1 → Funds sent to a fresh wallet, not moved further.
Ethereum (from Trust Wallet) TX: 0x1f2700997aaf636a8e549767cd7fbc4757f3de53004200fc7c5c02bddc636078 → Funds moved to a fresh wallet, partly staked.
Same dynamics observed for other tokens (SHIB, CHZ, DNT, GODS, COTI, BAND, FRONT, etc.).
MANA left on Ledger (another account) were not touched.
📌 Funds were not liquidated nor transferred to exchanges or mixers.
  1. Subsequent Tests
In the following days, to rule out a physical attack by nearby persons:
I hid the Ledger and sent 0.035 ETH to address 0x4a33C8CC61704220624fc0282C9FfD606B9d18ca. → Funds were stolen the following day. → Shortly after, I received an incoming transaction of 0.00000477 ETH from 0xA6faF4831F6a10b4b0745e9D04B03081F53cA2da.
I made a second test: sent 0.02407094 ETH to my Ledger. → After a few hours, the funds were stolen again. → Another micro-transaction of 0.0000074 ETH followed, from the same sender address (0xA6faF4831F6a10b4b0745e9D04B03081F53cA2da).
Physical attack excluded.
Final Question
Considering the facts described above, can you help me understand what happened? Have you ever seen similar cases?
write
preview
related posts
111 sats \ 1 reply \ @OT 21 Aug
I installed Trust Wallet and set a PIN. I created a new wallet and wrote down the seed only on paper.
Where did you put the paper backup?
Where there any camera's in the bar when you were writing down the seed words?
reply
0 sats \ 0 replies \ @anon 22h
Where did you put the paper backup? Where there any camera's in the bar when you were writing down the seed words? Today I’m going to check if there are cameras in the bar and I’ll let you know. I only saved the seed on paper and hid it in my camper when I was alone.
reply
11 sats \ 0 replies \ @ken 18h
This is a fascinating case. I'm sorry that this happened to you.
Everyone is quick to blame the user, but you wonder how many commercial hardware wallets are compromised in one way or another. There are many reports of stolen funds for no apparent reason.
reply
16 sats \ 0 replies \ @stack_harder 22h
pretty shocking, might be an idea to post on reddit too as they are probably more in the loop of crypto scams (since it wasnt just btc on the wallet)
reply
0 sats \ 0 replies \ @Scroogey 6h
Bitcoin (from Trust Wallet on iPhone) TX: 578f9054f66748ea4c65509b4d592f041c055a43c58423ede3ec8c563c1e48f1
This is the transaction where your Bitcoin were stolen, Aug 14th?
So bc1qlq59yxpdasgfd2ys3c3058ukr97r4zmjumq3cf is your own address in Trust Wallet?
If so, why was it funded on Aug 6th?
https://www.blockchain.com/explorer/addresses/btc/bc1qlq59yxpdasgfd2ys3c3058ukr97r4zmjumq3cf
Doesn't match your timeline.
Or which BTC address is yours, the one that was stolen from?
reply
0 sats \ 0 replies \ @guerratotal 23h
I don't remember if it's the Ledger or the Trezor, they had security problems a few years ago, they said that they could know the secret words or something like that.
reply
0 sats \ 0 replies \ @Primal_Mortis 23h
Brutal, I've heard of a few people having that issue with the ledgers s nano with the screen going dark. I've also know somebody else had problem with transferring to trust wallet and the funds never arriving. Think there might be some technical limitation going on with those entities. Best avoid in future.
reply
0 sats \ 0 replies \ @anon 22h
deleted by author