Your cold wallet is only as cold as the box it came in.

On October 9 (Beijing time), Ledger said it is investigating reports that over $86 million in crypto was drained from wallets set up on devices sold through CryptoBilis, its authorized reseller in Indonesia, Malaysia and the Philippines. On-chain researcher Specter traced the losses across Bitcoin, Ethereum and Tron the same day — a figure Ledger has not independently confirmed.

Ledger ordered CryptoBilis to halt all sales and shipments, and warned buyers from the last 90 days: do not initialize untouched devices, or move assets to a new signer with a fresh seed phrase if already set up.

The lesson: a supply-chain attack doesn't hack the hardware — it hacks the box before you open it. Buy direct from the manufacturer and verify a device before first use.

Not financial advice.

---

冷钱包够不够冷,看出厂到你手里这段路。

10 月 9 日(北京时间),Ledger 调查授权经销商 CryptoBilis 关联的钱包被盗,链上研究员 Specter 估计损失超 8600 万美元,横跨 BTC、ETH、TRON 链。

经销商已停售停发;近 90 天购机用户:未激活设备勿初始化,已启用的迁往新设备并换助记词。

观点:供应链攻击不黑硬件,黑的是拆封前的环节——硬件钱包认准官方渠道,首设先验机。

非投资建议,仅供参考。

$BTC $ETH #Ledger #CryptoSecurity #硬件钱包 #供应链安全