Schmidt on Nostr: Recent Ledger-related theft (~$100M from user wallets tied to a reseller) saw the ...
Recent Ledger-related theft (~$100M from user wallets tied to a reseller) saw the attacker route millions through Tornado Cash into Ztrash’s shielded pool. On-chain analysts still followed the full path via withdrawal transaction patterns, precise timing and value matching on exits. Hacker should have had a better opsec.
https://yfarmx.com/ledger-reseller-cryptobilis-drain/Published at
2026-10-13 09:21:49 UTCEvent JSON
{
"id": "00006f647fc273dc0eb46728fc9ba827441f75f20ada9b0714d55182cc8f4717",
"pubkey": "0d7ceca9e000e711e263bc14a2216ab74968a9e903eba214a714300adede5a20",
"created_at": 1791883309,
"kind": 1,
"tags": [
[
"client",
"monostr",
"31990:1601fcacdf227ddda10e33e71917930b49be436b43bdd030b799948a9f274ed3:monostr",
"wss://relay.monostr.com"
],
[
"nonce",
"104516",
"16"
]
],
"content": "Recent Ledger-related theft (~$100M from user wallets tied to a reseller) saw the attacker route millions through Tornado Cash into Ztrash’s shielded pool. On-chain analysts still followed the full path via withdrawal transaction patterns, precise timing and value matching on exits. Hacker should have had a better opsec.\nhttps://yfarmx.com/ledger-reseller-cryptobilis-drain/",
"sig": "1b2ad9db083aa6a2341f076d2f7481c4e96172899a79ac771b940a3cdb1f66f189cd0cd966baca84f0a87e771f7a65404ead358106e64de2a16c2c99c4a2bd29"
}
