Crypto trader Harley Lewis Foote said a WhatsApp payload let an attacker access his computer, close his publicly disclosed Bitcoin (BTC) short near $68,000 and take nearly all his funds.

Foote said the payload downloaded without him clicking anything and gave the attacker remote access. The attacker allegedly remained undetected for five days while monitoring Foote’s short position. Foote said the attacker closed the position as Bitcoin neared $68,000.

Foote said funds were taken through Hyperliquid, MetaMask and Tornado Cash, leaving him with $800. He also said the attacker accessed his email, passwords, website and X account.

Before taking the funds, the attacker allegedly tested a $10 withdrawal to avoid detection, Foote said.

Simon Yoon

Simon Yoon reports on blockchain technology for TokenPost. Send corrections or tips to [email protected].