I'm making a list of real-life examples of occasions where bitcoins were lost to various known attacks. One of these known attacks is that lightweight (SPV) wallets can't verify whether a transaction only spends UTXOs (a requirement full nodes enforce) so lightweight wallets can be tricked into accepting bitcoins that don't really exist.
Of course, only a dishonest miner would confirm that transaction, making the attack expensive if confirmations have to be involved.
Does anyone know of a real-life example of a user who lost money to this attack, either involving an unconfirmed transaction or a confirmed transaction? I'd prefer an example from Bitcoin, but examples from altcoins are welcome too.