Compass Investments

– Approximately $176 million worth of bitcoins were stolen. This leak was not due to a system breach or malware. Instead, it started with the disclosure of a passphrase that turned out to be the only bottleneck in the self-storage system.

The case centers on Ping Fai Yuen, who claims that his ex-wife, Fung Yung Lee, and her sister accessed his bitcoins by stealthily copying the data to recover his wallet.

The funds were on a hardware device designed to store private keys in complete isolation from the network and protect against remote attacks. Nevertheless, the theft still happened, and it didn’t take a cryptographic security breach.

Court records show that all that was needed to commit the theft was to learn the master phrase.

The prosecution paints a picture that looks more like a surveillance than a cyberattack.

The individuals in question are suspected of using a video camera or recording device to capture the cid phrase and associated codes.

The plaintiff became aware of the fraud when he received a tip from his daughter.

He then installed audio recording equipment, which he claims recorded discussions about the movement of assets.

Bitcoin was eventually transferred to 71 different wallet addresses.

Since December 21, 2023, no further transactions have been seen on the blockchain, indicating that the funds have remained untouched since the transfer.

Law enforcement agencies have reportedly seized equipment and hardware vaults as part of the investigation, although the case is still ongoing.

An interesting fact: in many cases, the vulnerability in crypto-security turned out to be hidden cameras, not hackers. Actual surveillance has quietly become one of the most underestimated threats to personally stored funds.

To understand the incident, it’s important to remember a key principle of cryptocurrencies: Whoever owns the cid-phrase has complete control over the assets.

The hardware wallet protects the keys from network risks. But the initial phrase, usually 12-24 words, serves as a complete backup of the entire cryptocurrency vault.

anyone can find the passphrase:

Simply put, once the master phrase is known, the physical device itself loses any significance.

What’s fascinating about this case is the method of compromise used.

Rather than resorting to phishing or malware, the accusations focus on capturing data visually or audibly, perhaps through covert camera or hidden recording.