Comment by mazamats

He still cloud have connected his Ledger to a compromised client and didn't double check what he was signing before confirming it.