A criminal who made millions of dollars running a fake-job scheme has emerged as one of the largest victims of the recent wave of thefts from tampered Ledger hardware wallets, losing more than 60 Bitcoin worth roughly $4.8 million to a separate group of attackers.

The finding, disclosed Thursday by blockchain analytics firm Chainalysis, adds an unexpected layer to an incident that has rattled confidence in hardware wallet supply chains and prompted a widening industry response.

The scammer had accumulated the Bitcoin through what is known as a task scam, according to Chainalysis. In such schemes, participants are initially paid small amounts to fabricate product reviews or boost online sales. Once trust is established, they are told…