A single high-net-worth individual has lost over $282 million in Bitcoin and Litecoin in what is now the largest individual crypto theft of 2026. On-chain investigator ZachXBT reported the incident late Thursday, identifying a sophisticated social engineering attack that bypassed hardware wallet security layers.
The Receipt: $282M Gone in Minutes
According to ZachXBT’s forensic analysis, the attacker gained access to the victim’s funds on January 10 via a social engineering scheme, likely impersonating support staff to extract credentials. The wallet was drained of roughly 2.05 million LTC (approx. $154M) and 1,459 BTC (approx. $138M).
This is not a protocol exploit or a smart contract failure; it is a direct compromise of a user’s keys. The scale of the theft surpasses the infamous $243 million Genesis creditor theft from August 2024, signaling that whales remain the primary target for high-end phishing operations.
The attacker drained approximately 2.05 million LTC and 1,459 BTC… directly targeting a single high-net-worth individual through a hardware wallet scam.
Market Moving Impact: XMR Liquidity Shock
The thief wasted no time laundering the proceeds. On-chain data shows the attacker funneled the stolen assets through THORChain, bridging funds to Ethereum, Ripple, and Litecoin networks before aggressively swapping into Monero (XMR).
The sheer volume of buy pressure on the privacy coin caused a massive liquidity shock. XMR spiked to nearly $800 earlier in the week, a new all-time high, as the hacker forced millions of dollars through instant exchanges to obscure the trail. Monero has since retraced to trade around $710, still up significantly as the laundering continues.
Conversely, Litecoin (LTC) dipped 3.5% to $75.78 as the market digested the potential selling pressure, while Bitcoin (BTC) remained relatively flat at $95,350.
Institutional Note: The Human Vector
This incident reinforces a critical market reality: custody risk is moving from exchanges to individuals. As institutions and whales self-custody to avoid counterparty risk, they expose themselves to increasingly sophisticated social engineering vectors. The usage of THORChain and Monero for immediate laundering highlights the continued cat-and-mouse game between privacy tools and forensic compliance.
