Social-Engineering Attack Steals 783 BTC From a Self-Custody Holder
An unidentified Bitcoin holder lost 783 BTC, worth roughly $91 million at the time, after attackers impersonated support staff associated with an exchange and hardware wallet. The theft became a major example of how social engineering can bypass otherwise strong self-custody technology.
On August 19, 2025, an unidentified Bitcoin holder was deceived in a social-engineering attack and lost 783 BTC. Blockchain investigator ZachXBT traced the theft and reported that the attackers had impersonated support personnel connected with a cryptocurrency exchange and hardware-wallet provider, manipulating the victim rather than defeating Bitcoin’s cryptography.
The size of the loss—roughly $91 million at prevailing prices—made the case exceptional. ZachXBT followed subsequent laundering activity and reported movement through privacy tools including Wasabi. The on-chain trail made the aftermath visible even though the initial compromise occurred through human trust and operational mistakes rather than a flaw in the Bitcoin protocol.
The event exposed a central paradox of self-custody. Holding one’s own keys removes exchange and custodian counterparty risk, but it also makes the user the final security boundary. Attackers therefore target identity, urgency, support channels and recovery procedures. A technically secure hardware wallet cannot protect funds if a user is manipulated into revealing secrets or authorizing a malicious transaction.
For Bitcoin history, the theft belongs alongside other physical and social attacks on holders because it shows how the threat model changes as individual Bitcoin holdings grow in value. Security increasingly includes not only cryptography and software, but also communications discipline, operational procedures and resistance to impersonation.