The investigating judge of the Shevchenkivskyi District Court of Zaporizhia granted the request of the police and the prosecutor to seize a mobile phone seized as part of the investigation into the theft of cryptocurrencies worth about UAH 2.9 million.
The investigating judge of the Shevchenkivskyi District Court of Zaporizhia granted the request of the police and the prosecutor to seize a mobile phone seized as part of the investigation into the theft of cryptocurrencies worth about UAH 2.9 million.
According to the investigation, several large transfers were made from the Ledger cold wallet, and some of the funds ended up in a crypto wallet installed on the seized iPhone.
On August 12, 2025, the investigating judge of the Shevchenkivskyi District Court of the city of Zaporizhia decided to seize the iPhone 13 Pro Max mobile phone.
According to the materials of the proceedings, on August 6, 2025, an unidentified person stole cryptocurrency funds from the victim’s «cold» (hardware) Ledger Nano X wallet.
At least four large transactions were made , totaling approximately UAH 2.9 million in dollar terms. The following transactions are listed in the case file:
The suspect explained that on 05.08.2025 he gained access to the victim’s cold wallet because he had an identical Ledger nano X cold wallet. He remembered the 24-word seed phrase that was generated during the initial setup of the wallet, and using the «wallet recovery» function — by entering the seed phrase, he generated an identical crypto wallet, which he later connected to the Ledger Live mobile application on his iPhone 13 Pro Max mobile phone.
Thus, he gained full access to the virtual assets of the victim’s «cold» wallet.
During the examination of the seized iPhone, investigators found a Trust Wallet decentralized wallet installed on it with five crypto assets worth a total of approximately $65,548 (USDT ERC-20, ETH, BTC, XRP, USDC). The transaction details on the phone recorded two ETH receipts (+6.070199 ETH — approximately $22,366.97 and +5.546727 ETH — approximately $20,438.12).
The investigation also points to a direct connection between transactions from the victim’s cold wallet and the address recorded in Trust Wallet: one of the transactions on 06.08.2025 at 03:18 (receipt of +5.546727 ETH) was made from the address to which, according to the victim, part of the stolen funds were received. This became the basis for the investigators' conclusion that the phone contained evidence that is essential for the investigation.
Comment hidden for violating commenting rules.