Malaysian police have launched an investigation into a suspected cryptocurrency wallet breach after a man in Teluk Intan reported losing approximately RM12.47 million, equivalent to around $3.05 million, in unauthorized digital asset transfers. Authorities are working with national commercial crime investigators to trace the funds and identify those responsible.
The victim reportedly discovered the missing assets at approximately 1 p.m. on October 9. Perak police confirmed that the transactions involved cryptocurrency transfers through a blockchain network. However, investigators have not disclosed which digital assets were stolen, which blockchain was involved or how the wallet may have been compromised.
The investigation is being conducted with assistance from the cryptocurrency unit of Malaysia’s Bukit Aman Commercial Crime Investigation Department. Investigators are examining transaction records to establish how the assets moved after leaving the victim’s wallet and whether the transfers can be linked to identifiable individuals or services.
Although blockchain records can help investigators trace transactions between wallet addresses, identifying the people controlling those addresses may require additional evidence and cooperation from relevant service providers. Authorities have not released wallet addresses or transaction identifiers, and no asset recovery, freeze or seizure has been confirmed.
Police are investigating the case under Section 420 of Malaysia’s Penal Code, which addresses cheating and dishonestly inducing the delivery of property. The legal provision carries potential criminal penalties, but investigators have not publicly identified a suspect or announced any arrests or charges connected to the reported theft.
The method used to gain access to the victim’s assets also remains unknown. Potential cryptocurrency security risks can include phishing, compromised private keys, exposed recovery phrases, malicious software and fraudulent transaction approvals. However, authorities have not confirmed that any of these methods was involved in the Teluk Intan incident.
Perak police have also urged cryptocurrency users to protect sensitive wallet information, avoid suspicious links and monitor transaction activity. Recovery phrases and private keys can provide direct access to digital assets, making their protection essential for users who manage their own wallets. Police have recommended preserving digital evidence and reporting suspected unauthorized transactions promptly.
The case highlights the challenges involved in investigating large cryptocurrency losses, particularly when funds move across multiple wallet addresses or services. While blockchain transaction records can provide a traceable history of asset movements, recovering stolen funds depends on the evidence available, the ability to identify those responsible and whether the assets can be located or secured.
The investigation remains ongoing. Authorities have not confirmed the identity of the suspected attacker, the technical cause of the incident or whether any of the reported RM12.47 million in missing assets has been recovered.
