Once the attacker has a hot wallet's password and private key, they can control what comes in. Although transactions made using blockchain-based digital currencies are posted to a public ledger, criminals can use sophisticated coin-mixing services to steal money. This makes it difficult to recover stolen money.