case-study - ZeroTraceLabs

case-study

Ledger Data Breach and Wrench Attack Campaign: When Digital Exposure Becomes Physical Threat

A compromised e-commerce database turned hardware wallet users into targets of physical coercion, proving that operational security extends far beyond private key management.

case-study

The $40M Hardware Wallet Phishing Theft: How Social Engineering Defeated Cold Storage

A sophisticated, multi-vector phishing campaign stripped 521.99 BTC from a high-net-worth individual despite hardware wallet protections.

case-study

Marlon Ferro Wrench Attack Ring: Coordinated Physical Home Invasions Targeting Crypto Holders

How a criminal enterprise merged digital surveillance with physical coercion to steal cryptocurrency from victims in their homes.

case-study

Bybit Multisig Blind Signing Hack: A $1.5 Billion Supply Chain Compromise via Safe{Wallet} Frontend Manipulation

How North Korea's Lazarus Group exploited blind signing and a compromised web interface to execute the largest single theft in crypto history.

case-study

Silent Swap: The JavaScript Supply Chain Attack That Weaponized the World's Most Downloaded Packages Against Crypto Users

A single phished developer credential turned billion-download npm packages into multi-chain wallet address hijacking infrastructure.

case-study

Julia Goodwin SIM Swap and Physical Attack: When Digital Compromise Escalates to Armed Home Invasion

A retirement-age crypto investor was targeted through carrier-level SIM hijacking, followed by violent physical coercion — exposing the lethal convergence of telecom fraud and real-world violence in crypto theft.

case-study

GreedyBear Malicious Firefox Extensions Campaign: A Supply-Chain Phishing Operation That Drained $1M Across Multiple Chains

Over 150 counterfeit browser extensions impersonating MetaMask and Coinbase Wallet weaponized the Firefox Add-ons ecosystem to harvest seed phrases at scale.

case-study

Trezor Support Impersonation Phishing: A $284 Million Single-Call Social Engineering Attack

One phone call. One compromised investor. 71% of January 2025's total adjusted crypto fraud losses.

case-study

Ledger-Global-e Customer Data Breach & Phishing Campaign: Supply Chain Data Exposure at Scale

Third-party e-commerce partner compromise exposes Ledger customers to targeted phishing, reprising the company's worst operational nightmare.

case-study

Ronin Bridge Hack: Anatomy of a $625 Million Private Key Compromise via Social Engineering

How a fake job offer led to the largest bridge exploit in DeFi history and exposed fatal validator centralization in the Ronin Network.

case-study

Monkey Drainer NFT Phishing Campaign: Anatomy of a Phishing-as-a-Service Operation That Extracted $16M from the Ethereum Ecosystem

How a commoditized drainer kit deployed across hundreds of fake mint sites systematically harvested NFTs, ETH, and ERC-20 tokens from thousands of victims.

case-study

Ledger Connect Kit Supply Chain Attack: How a Single Compromised npm Account Drained $600K Across the EVM Ecosystem

A phished ex-employee's NPMJS credentials turned a trusted frontend library into a cross-chain wallet drainer.