#LedgerConfirmsUnauthorizedHardwareImplantInUserDev
The Ledger case just went from "possible" to "confirmed."
When this news first came out, the big question was - were the actual devices tampered with? Now Ledger has given a partial answer.
Here's the latest update:
Ledger Support has confirmed that one affected user's device had an unauthorized hardware implant inside it. The company is now contacting affected users, working with law enforcement, and thanked the SEAL 911 security group for their help.
Ledger says there's no evidence that its own systems or infrastructure were compromised.
The reseller involved, CryptoBilis, has also confirmed that it has suspended all hardware wallet sales until the investigation is over.
Ledger's advice for users:
If you bought a device from that reseller and haven't set it up yet - DO NOT initialize it. If you already set it up, move your assets to a new wallet with a brand new recovery phrase.
And remember, Ledger will NEVER ask for your 24-word phrase. Scammers will definitely try to use this news to trick you.
Important to note: confirming an implant in one device doesn't mean it caused all the reported losses - outside estimates put that between $86M to $93M. We still don't know how many devices were affected or where exactly the tampering happened.
Why is this a big deal? Hardware wallets protect you from online hacks, but a physical supply-chain attack is totally different - and it's almost impossible for a normal user to spot. Ledger says they are now working on stronger anti-tampering measures.
It really makes you think - if trust starts from where you buy it, how much can we rely on packaging and how much should we verify ourselves? 🤔
#Ledger #CryptoSecurity #SupplyChain
$LUMIA $STRK $CFX
The Ledger case just went from "possible" to "confirmed."
When this news first came out, the big question was - were the actual devices tampered with? Now Ledger has given a partial answer.
Here's the latest update:
Ledger Support has confirmed that one affected user's device had an unauthorized hardware implant inside it. The company is now contacting affected users, working with law enforcement, and thanked the SEAL 911 security group for their help.
Ledger says there's no evidence that its own systems or infrastructure were compromised.
The reseller involved, CryptoBilis, has also confirmed that it has suspended all hardware wallet sales until the investigation is over.
Ledger's advice for users:
If you bought a device from that reseller and haven't set it up yet - DO NOT initialize it. If you already set it up, move your assets to a new wallet with a brand new recovery phrase.
And remember, Ledger will NEVER ask for your 24-word phrase. Scammers will definitely try to use this news to trick you.
Important to note: confirming an implant in one device doesn't mean it caused all the reported losses - outside estimates put that between $86M to $93M. We still don't know how many devices were affected or where exactly the tampering happened.
Why is this a big deal? Hardware wallets protect you from online hacks, but a physical supply-chain attack is totally different - and it's almost impossible for a normal user to spot. Ledger says they are now working on stronger anti-tampering measures.
It really makes you think - if trust starts from where you buy it, how much can we rely on packaging and how much should we verify ourselves? 🤔
#Ledger #CryptoSecurity #SupplyChain
$LUMIA $STRK $CFX