Fraudster Robbed of $4.8M After Buying Compromised Ledger Wallets: Asia Express

Fraudster Robbed of $4.8M After Buying Compromised Ledger Wallets: Asia Express

In a case of poetic justice, a fraudster's $4.8 million in stolen cryptocurrency was drained by attackers who compromised Ledger's supply chain. Meanwhile, South Korean authorities block 27 digital asset platforms and additional updates. Asia Express

Scammer becomes victim in Ledger supply chain compromise incident

This week, Ledger was compelled to halt its reseller operations throughout South East Asia following a major security breach in which criminals managed to steal over $103.4 million from 530 wallet addresses through compromised Ledger devices that had been infiltrated into the distribution network. However, in what can only be described as karmic retribution, blockchain analysis reveals that one of those who lost funds was actually a scammer themselves, according to data from Chainalysis.

The blockchain intelligence company has disclosed that this particular fraudster had 60 Bitcoin drained from their wallets—approximately $4.8 million in value—after purchasing three brand-new Ledger hardware wallets that had been compromised with malicious spyware designed to capture seed phrase information. The attackers who had tampered with the Ledgers consolidated funds from all three devices into a single wallet address.

Adding another layer of irony to the situation, this particular scammer had been running what's known as a "task scam" operation, which involved compensating individuals to create fraudulent sales transactions and post fake reviews for legitimate products. This means that depending on their level of awareness, even the scammer's own victims may have been engaging in dishonest activities. "Then a "negative balance" appeared, and they were told to add their own money in order to get paid," Chainalysis reports. The situation suggests we may be looking at a scammer who targeted other scammers, who has now fallen victim to yet another scam. The cryptocurrency world sometimes reveals layers upon layers of deception.

Although there have been accounts of tampered Ledger devices appearing across Europe, prompting major electronics retailer MediaMarkt to halt all sales, Ledger maintains that every confirmed theft incident has originated from the Asian market. The company has issued requests to authorized resellers operating in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong to immediately pull Ledger products from their shelves. Similarly, Trezor has made the decision to discontinue relationships with certain remote resellers in its distribution network starting Jan.1, citing an inability to maintain the same stringent oversight standards it applies to resellers in closer geographic proximity. Importantly, no compromised Trezor devices have been reported to date.

Right in the middle of what represents the most severe hardware wallet security crisis since the Coldcard seed phrase controversy that emerged at the conclusion of July, Ledger made the strategic choice to unveil its newest product offering. Named Atom, this $849 device merges cryptocurrency wallet functionality with Android application capabilities, maintaining strict separation between standard app operations and sensitive wallet functions. According to Ledger, the device incorporates security measures specifically designed to prevent the type of implants used in the Asian theft incidents and features technology capable of identifying tampering attempts even when the device is powered down.

Ledger Atom device
The new Ledger Atom device revealed. Source: Ledger

South Korean regulators take action to block 27 international cryptocurrency platforms

Regulatory authorities in South Korea have given approval to actions that will restrict domestic internet access to 27 websites run by cryptocurrency exchanges and other virtual asset service providers operating without proper registration, with platforms such as KuCoin, MEXC, Phemex and Bitrue among those targeted.

In an official statement, the Financial Intelligence Unit (FIU) explained: "With this decision, blocking measures against illegal virtual asset operators will also apply to internet websites, following apps such as those on Apple and Google," the FIU said, according to a translation.

Additional platforms affected by the blocking measures include CoinW, BTCC, BitMart, BingX, DigiFinex and several others.

South Korean government announces cybersecurity reform following attacks on financial institutions and crypto platforms

South Korean authorities have announced plans to strengthen cybersecurity requirements across financial institutions in response to an investigation examining earlier security breaches that affected 16 organizations, including cryptocurrency exchanges, which revealed significant vulnerabilities.

According to the Financial Services Commission (FSC), the regulatory body will implement enhanced threat detection systems, increase the frequency of security evaluations and establish stronger executive accountability measures following a comprehensive industry examination that identified cybersecurity weaknesses at 130 out of 555 financial companies reviewed.

South Korean financial institution introduces Bitcoin-collateralized commercial lending: Report

According to reports, Jeonbuk Bank has commenced offering business loans backed by Bitcoin to its corporate clients, with cryptocurrency collateral being held by an independent third-party custodian.

Bitcoin and Ether exchange-traded funds begin trading in Thailand

Thailand's Securities and Exchange Commission has completed regulatory guidelines that took effect Friday permitting cryptocurrency exchange-traded funds (ETFs) to begin listing on the nation's primary stock market.

Launching with Bitcoin and Ether ETF products, these investment vehicles must trade exclusively through the Stock Exchange of Thailand. Initially, products that track foreign cryptocurrency ETFs will not be allowed, and Thai brokerage firms are prohibited from facilitating investments in international crypto ETFs except for institutional investors and ultra-high-net-worth individuals.

Speaking to Cointelegraph, James Butterfill, head of research at digital asset investment firm CoinShares, advised tempering expectations.

"I would expect modest inflows initially, with tens of millions of US dollars across the first products a more realistic starting expectation than billions," he said.

Sydney skyline
Source: Cointelegraph

Australian regulators solicit industry input on cryptocurrency exchange regulations before 2027 implementation

The Australian securities watchdog initiated a public consultation process Thursday regarding proposed capital requirements, custody standards and trading regulations for cryptocurrency platforms, as preparations continue for implementing legislation that was approved in April to expand regulatory oversight of the digital asset sector.

The regulatory proposals encompass three different capital requirement frameworks, limitations on platforms engaging in proprietary trading activities, and mandated quarterly disclosure of wallet addresses containing customer funds. ASIC has also suggested permitting offshore custody arrangements while requesting stakeholder feedback on protective measures in scenarios where an overseas parent company or affiliated entity experiences financial failure.

Additionally, the Australian Securities and Investments Commission (ASIC) has suggested extending existing regulations governing contracts for difference (CFDs) to include cryptocurrency products. CFDs enable traders to speculate on asset price fluctuations without taking ownership of the underlying asset.

Fraud victims from China lose critical legal challenge over 61,000 Bitcoin assets

Victims of fraud in China who are attempting to recover 61,000 Bitcoin that were confiscated by British government authorities have suffered a significant legal setback after London's High Court determined that Chinese law, not English law, should apply in claims regarding ownership of the digital assets.

"The relevant damage occurred in China. The Applicants parted with their money in China. The contractual relationships thereby induced were entered into in China."

Justice Mark Turner

The legal battle originates from an investment fraud operation run by Zhimin Qian during the period between 2014 and 2017, with the assets having been seized by British law enforcement during a money-laundering probe. The claimants have indicated their intention to appeal the decision within British courts.

Coins.ph maintains Philippine central bank licensing remains valid despite media reports

According to Coins.ph, the platform continues to hold valid licensing from the nation's central banking authority despite emerging reports suggesting potential license revocation related to alleged transaction activity involving prohibited offshore gambling operations.

As one of the Philippines' leading cryptocurrency exchanges, Coins.ph faces reported licensing concerns following restrictions the central bank placed on certain incoming transfers connected to DCPay Philippines, which operates the peso e-wallet services for Coins.ph.

"Coins.ph firmly denies any claim that it knowingly serves offshore gaming or gambling operators," the company said. "Our users' funds are safe; we continue to operate as a BSP-licensed institution," it added.

Binance exploring addition of Asian equity markets to trading platform

During the Token2049 conference, Binance co-CEO Richard Teng indicated the exchange is considering adding equities from Hong Kong, Korean, Taiwanese and Brazilian markets to its trading platform.

Hong Kong exchange welcomes second Solana-based ETF listing

A Solana ETF from Pando Finance has begun trading on Hong Kong's HKEX under ticker symbol 2831.hk. As the second such investment product in the market, it features a 0.6% management fee, providing a cost advantage over the initial offering from ChinaAMC which carries a 0.99% annual fee.

Cryptocurrency scam losses in Singapore decline by 43%

Collaborative enforcement efforts by Singapore Police working alongside domestic cryptocurrency exchanges have contributed to a 43% year-over-year reduction in reported financial losses attributed to cryptocurrency scams.

Revolut announces expansion plans with new Singapore headquarters

Revolut has revealed plans to establish a new Singapore office location, commit S$350 million (US$273M) in investment capital over the coming five years, and grow its local employee base from 170 to 300 personnel.

← Back to Blog