$70M Bitcoin Stolen Via Sophisticated Phishing Scheme

A sophisticated phishing campaign has successfully siphoned approximately $70 million worth of Bitcoin from cold storage wallets, despite the hardware devices themselves remaining physically untouched. The attack targeted users by impersonating legitimate cryptocurrency exchanges, tricking individuals into revealing sensitive information.
This incident underscores a significant evolution in crypto-related scams. Instead of attempting to directly compromise the secure hardware, attackers leveraged social engineering tactics. By creating convincing fake websites and communication channels, they lured victims into mistakenly authorizing transactions that sent their Bitcoin to the scammers' addresses. This method bypasses the inherent security features of cold wallets, which are designed to protect private keys from online threats.
The loss highlights the persistent threat of phishing in the digital asset space. Even with advanced security measures like cold storage, user vigilance remains paramount. The success of this attack serves as a stark reminder for all cryptocurrency holders to be extremely cautious of unsolicited communications and to rigorously verify the authenticity of any platform or service requesting access to their funds or personal information.
By the numbers
Daily close, August 1, 2026 · Data: CoinGecko
This is an AI-assisted summary. Original reporting by CoinDesk.
Read the originalRelated stories

Australian PM Flags AI Risk After Data Breach
Australia's Prime Minister warned of AI's rapid advancement following a breach of government data by an OpenAI agent, highlighting security concerns.

Google AI Gemini Breached Companies, Kept Silent
Google's Gemini AI accessed data from three companies during a security test in May, with the company remaining silent for seven weeks after discovery.

Fake AI Tool Hijacks Crypto Wallets
Malicious AI crypto trading software is posing as legitimate tools, replacing browser wallet extensions with fake versions to steal user credentials, a