Got compromised and lost over $120k in crypto; AMA

As I sit here on the first day of the new year, writing this post, I think to myself how much can one human take before it's just too much? The world can just be an absolutely awful, awful place.

I read these "stolen or hacked crypto" posts all the time. I always think, wow that person doesn't know what they're doing, shouldn't be investing in crypto in the first place, or that would never happen to me, because I'm super careful! Maybe they are just lying and trying to just get sympathy? Believe me, I wish I was.

Although, the posts that seem legit I always try to help. Now, I am on the other side of it. Never thought I'd be here.

I've been investing in digital assets since early 2016. I would consider myself pretty knowledgeable on all things related crypto/blockchain. I believe in the tech, I built my portfolio up for years and this is pretty much the only thing I enjoy in life.

I have a hardware wallet (Ledger Nano S) since 2017 and 4 different Metamask "hot" wallets. The hardware wallet consisted of 80% of my portfolio.

Yesterday, I used my Metamask to access all my wallets for a balance status check before the new year. Everything seemed normal. After checking again late last night and after seeing one of my accounts showing as zero, I noticed every wallet was wiped.

My only possible conclusion is that I clicked a malicious link while surfing the internet. The trojan must have somehow took control over my Google Chrome browser (or Metamask extension) while I was using it, while my ledger was unlocked. Checking the transactions times they were sent out around the time I had it open. Again, I never was prompted to accept or approve anything that I myself wasn't doing. It is frightening.

As I look at all of my wallets today, I see zero balances and I am absolutely crushed. It took all my power to even get out of bed, file reports, and write this post today.

I filed a report with my local county police department and the FBI. Although, I doubt either will be of any help, unfortunately.

Checking the transactions, it seems like the wallets were completed wiped in a matter of minutes.

​

Hacker's ETH address:

0x365DB2B5722d13F431224066898b4CF8cA7AdFe5

​

Address on all chains:

https://blockscan.com/address/0x365DB2B5722d13F431224066898b4CF8cA7AdFe5

​

I'm hoping one of the wallets leads to a KYC connection, but obviously a long shot here. Super grateful for any research or help.

Some of the crypto that was stolen:

$ETH $MATIC $AAVE $TIME $OVR $ENS $ZRX $AVAX

If the hot wallets were all hacked, it would not be the end of the world. I just don't understand how the hacker accessed my hardware wallet, too. Again, I was never prompted a transaction to approve. My seed phrase is on paper, stored in a safe, which no one has access to. My seed phrase has never been written down anywhere else, no computer, no phone, except on that paper in the safe.

I know since it's self custody, it's obviously still my fault. Aside from probably accidently clicking a malicious link on the internet somewhere, I'm still at a complete loss of what I could have done better. A possible solution was to maybe have the hardware wallet on a computer I never touched - one that I never used the internet for, but this is all in hindsight.

I've been on this computer for years and there's been a few times when accidently clicking something that starts an auto-download. Obviously, I am always quick to delete or disable those files. Maybe a virus file was lying dormant for months or years without my anti-virus catching it? Just waiting for the right opportunity? Maybe it is a Metamask data leak? I'm not sure. I like to think I'm pretty careful about my passwords and security.

I mainly write this post to warn others. Even if you think you are safe, you might still be at risk. I guess with these advanced hackers now, all it takes is one wrong click. This was my life savings aside from a few emergency funds in my traditional bank. I don't think I will ever financially, emotionally, or mentally recover from this. It has affected my life and my family tremendously. I hate to sound dramatic and be that guy, but I'm honestly at a point now where life doesn't even seem worth it.

I'm trying my best to use the last of my energy to fight back.

Any help at all is super, super appreciated and I hope one day to pay you back tenfold (when I can).

Thank you.

---

TL;DR ledger nano s hardware wallet and Metamask hot wallets were all hacked. Did everything in my power to keep my crypto safe and still lost everything. Most likely from a miss click link -> file download somewhere? Not entirely sure. My life savings gone. I am absolutely crushed beyond belief. Happy new year, this is the worst day of my life.

---

UPDATE: Many have reached out and experienced a similar hack, multiple with hardware wallets too. So many others have messaged to try to help and I can’t thank you all enough. Doing my best to respond while working with exchanges, law enforcement, etc.

I haven’t slept and working around the clock to try to bring justice to this. This is potentially huge and I don’t want others facing the same fate.

Can’t comment on much right now but a computer forensics expert is looking at my computer. Learned so far of a new malware that can hack into many of different crypto wallets. Yes, seems like Ledgers too. Potentially promising.

Compiling a comprehensive report when I can.