^^This. Don't do it, OP. Someone's using you to launder. And guess who the authorities will catch first?  It ain't worth 10%. You're right to ask questions.

Yes, I agree. The mixer reference is not a negative connotation.

Wasabi is excellent. However, they're under investigation by Europol. Chainalysis did an 3-week investigation for them and according to their findings, 30% of the funds washed come from the dark market. Remember, this is similar to what happened to bestmixer.io before they got shut down.

https://coinjournal.net/news/wasabi-the-bitcoin-mixer-wallet-is-on-europols-radar-for-a-significant-amount-of-dark-web-transactions/ 

They don't market themselves as a mixer, but effectively that's what they offer. Their purpose is to obfuscate funds. And true, not ALL of the addresses are vics.

Ok--not an exploit--using this term liberally. Meaning, malware on OPs mobile exploited a flaw in OPs security.

I found this on Ledger's site: https://support.ledger.com/hc/en-us/articles/360005514233-Secure-your-recovery-phrase-PIN-code They do say never to take a photo of the 24-word recovery phrase. They have an "In the News" section where they highlight relevant information. A blog on security pinned to their front page might be a nice addition--Not everyone hops on forums, not every customer understands security. It's a kindness. Getting information out there is useful to the entire crypto community--we want this to succeed, I assume, and the community to grow. So do these companies. The more visibility/education on scams, fraud, security best practices--the better for all.

I hope this info is useful to you, OP. Again, very sorry this happened. Wishing you the best.

I'm sorry this happened! I hope you've resolved the issue that led to the theft so it never happens again.

Your funds were sent to the mixer Wasabi wallet bc1qh6h8fxnldvm78gtpm00jjun5suwx2mn2jt7qm2 and commingled with 65 UTXOs--likely other victims. The funds were split into even transaction amounts--0.10791 BTC, with the exception of 1 output of 10.45923 BTC which was sent through the mixer again. There are hundreds of victims from what I can see. The funds are split from there; commingled; and sent to other private wallets and exchanges.

I'm not sure which hardware wallet you are using, but there is a clear exploit happening. You stated you made a mistake, saving the info--but I'd still contact the company and let them know what happened. They can't do anything, but you can raise their awareness and perhaps they can write a blog on how to protect private keys when using their wallet.

Old post, but just in case you still want the info:

https://ciphertrace.com/defenders-league/

Regarding the reference to the dark market and the Russian evading state regulations example: MCM may be considered a money transmitter under FINCEN, which means they'd need a license:

https://cryptobriefing.com/bitcoin-coin-mixers-legal-crosshairs/

"Users of mixing services, however, need to be more vigilant. They are liable, according to FinCEN guidance, of being found to be intending to conceal the identities of funds or are, in fact, operating as transmitters. Transmitters need licenses. Concealing the identity of a sender or receiver of funds is a breach of the Funds Travel Rule if conducted by a registered financial institution.

While non-custodial wallet developers are not in breach of any legal obligation, those who use their software could be. The concern for those using mixing services is that in both the Harmon and Bestmixer cases, the enforcement actions were premised on the intent to conceal dirty Bitcoin.

Perfectly valid privacy-based grounds for mixing cryptocurrencies risk being swept up in the zealous delivery of law enforcement. Even if the primary purpose of this software is to protect people’s identities, there may be a tendency for law enforcement to assume these coins were ill-gained."