Bitcoin Holder Loses About $750,000 After Google Account Hack Despite Avoiding Hardware Wallet Theft
- According to GoPlus monitoring, a Bitcoin holder recently moved assets from a Coldcard MK4 hardware wallet to a centralized exchange.
- The transfer avoided the risk of the hardware wallet itself being stolen.
- Less than 12 hours later, the user's Google account was hacked.
- Because Google Authenticator cloud sync was enabled, the exchange account was accessed and about $750,000 worth of Bitcoin was drained.
- GoPlus said such attacks usually rely on social engineering, phishing, credential stuffing, weak passwords, or compromised recovery channels rather than brute force.
PANews reported that a Bitcoin holder moved funds from a Coldcard MK4 hardware wallet to a centralized exchange and initially avoided the risk of the device being stolen. The transfer itself was completed without incident.
However, within 12 hours, the user's Google account was compromised. Because Google Authenticator cloud sync had been enabled, the exchange account was then accessed and roughly $750,000 in Bitcoin was drained.
GoPlus said the attack pattern was consistent with common account-takeover methods rather than brute-force hacking. The examples it listed included phishing pages, malicious browser extensions or cracked software, weak password reuse, and takeover of recovery email or phone channels.
The incident is negative for crypto security sentiment, as it highlights the risks around exchange accounts and cloud-synced authentication even when hardware wallets are used properly.
比特币持有者避开硬件钱包被盗后，因谷歌账户遭入侵损失约75万美元
PANews 报道称，一名比特币持有者将资金从 Coldcard MK4 硬件钱包转入中心化交易所，起初避开了硬件钱包被盗的风险，转账过程本身也没有出现问题。
但在不到 12 小时后，该用户的谷歌账户被入侵。由于启用了 Google Authenticator 云同步，攻击者随后登录了交易所账户，并转走了约 75 万美元的比特币。
GoPlus 表示，这类攻击更常见的是社工钓鱼、撞库、弱密码复用，或通过恶意浏览器插件、破解软件以及被接管的找回邮箱/手机号实施，而不是暴力破解。
从市场影响看，这类事件对加密货币安全情绪偏利空，主要反映出交易所账户与云同步认证环节仍存在被攻击的风险。