> While the article seems part-advertisement

It's all advertisement. The first paragraph is "Spoiler alert: their funds secured via Casa multisig remain safe."

> the risk is real.

I'm not so sure, I think there's a good chance this was made up. Unless this victim let on how much cryptocurrency he had early on in the conversation, this whole scenario seems too high-risk/low-reward to be very real. I mean, a Tinder account backed by a real person (supposedly with real photos to not put off the mark), waiting for people interested in cryptocurrency to steal it? Not drugging a lot of small fish who were bragging and attracting the attention of the police before finding a whale?

Here's one take: You don't go around calling yourself a crypto trader if you do not have a significant stake. The victim engaged with the thief because they too had "I am a crypto trader" in their bio, which indicates they may be equally wealthy. It's a kind of financial classism, common financial ground, possibly "falling into wealth" from low investments, etc.

> Here's one take: You don't go around calling yourself a crypto trader if you do not have a significant stake.

I think the flaw with that is that I could totally see some unemployed dude who took his meager savings and went all /r/wallstreetbets into dogecoin describing themselves the same way on a dating app. I guess the question is, which one is closer to the more typical case?

But one point of the article was that he did have MFA - and it's no use in this scenario (attacker had physical access to second factor)

It's not really MFA if it's all done on your phone.

Fair point! The article mentioned his laptop but it's unclear to me.

Aside: It's something I worry about sometimes too on phones...

I once asked about the best way to exchange a significant amount of crypto in a public FB group (I know, poor opsec).

That night, someone on the other side of the world shared a random PDF with me.

I was smart enough not to touch that bad juju PDF, but I wonder if it was an attempt to hack me. Anyone know?

> I was smart enough not to touch that bad juju PDF, but I wonder if it was an attempt to hack me. Anyone know?

There's no way anyone can answer that unless you share the PDF for analysis (and I couldn't even answer then).

I did want to look at it but there's too much risk of me clicking on the wrong thing. So it will stay in limbo forever.

>Best not to let strangers know your worth

Bitcoin has no privacy by default, so that's not going to work unless people never transact