Incident overview
Malware replaced Telegram and Ledger/Trezor software while stealing local credentials; aggregate on-chain loss remains unknown.
Amount basis
No single verified USD loss figure was published; see the incident record.
Evidence boundary
The archive preserves the publicly reported cause, sequence, asset-flow status, and evidence boundaries. Attribution or downstream movement not established by the cited sources remains unconfirmed.