A crypto scammer moved millions in stolen funds into hardware wallets for safekeeping, only to watch a second thief drain every last coin days later.

The chain of events reveals a supply chain threat that could put far more than one scammer's ill-gotten gains at risk.