⚠️ Ledger users lose nearly $90 million overnight! CZ speaks out: Your hardware wallet may be fake
If you just came across this in the middle of the night, don't panic—but if you use Ledger, you need to read this. The crypto world's biggest security incident tonight involves nearly $90 million.
① What happened: Large numbers of Ledger users in Southeast Asia had their wallets drained. On-chain analyst Specter traced the stolen funds to hundreds of victims' wallets across Ethereum, TRON, Bitcoin, and other blockchains, with losses exceeding $86 million. MistTrack, by SlowMist, traced reported losses nearing $90 million. Tether is freezing large amounts of USDT in the associated addresses. (Foresight News)
② What went wrong: Ledger officially confirmed to The Block that it is investigating. All the devices involved were purchased from the same reseller, CryptoBilis, suggesting a possible supply chain attack. Some users may have received counterfeit or tampered-with devices. Ledger has asked the reseller to suspend sales and shipments during the investigation. This is the largest security incident in Ledger's recorded history; the previous biggest was a fake app incident involving $9.5 million. (Foresight News citing The Block; ChainCatcher)
③ Who was hit hardest: According to ChainCatcher, one user deposited 7 million USDT into a Ledger and had it stolen—possibly the largest single loss in this incident. Another address spent $5.2 million on 80 BTC four months ago and stored them in a Ledger; the entire amount was drained.
④ What you should do (Ledger's official advice): If you bought a device from CryptoBilis in the past 90 days and haven't set it up, don't set it up. If you've already set it up and are using it, immediately move your assets to a new device with a new recovery phrase. Remember: only buy hardware wallets from the official website.
⑤ What the big names are saying: Changpeng Zhao posted overnight, warning that this appears to be a supply chain attack limited to a single vendor. He said Ledger remains one of the hardware wallet brands with the longest history in the industry and called on the entire industry to help recover the funds. Trezor also responded: CryptoBilis is one of its resellers too, but its checks have so far found no similar issues. (Foresight News)
The broader market hasn't been spooked into a crash: BTC is currently at $82,642, holding above its 24-hour moving average of $82,179 (checked live on Kraken for this post at 01:43). Amid all the panic, if your money is still in your own hands, first check where you bought your wallet.
Honestly, we've all seen exchanges blow up and stablecoins lose their pegs. But the fact that even a “most secure” hardware wallet can be compromised through its supply chain is what really sends chills down your spine. Buying a wallet from a reseller to save a little money could cost you your entire principal.
💬 Where did you buy your hardware wallet? Official website / reseller / secondhand—drop your answer in the comments and let's see how many people have run into a similar trap.
#比特币 #以太坊 #Ledger #硬件钱包 #币圈安全
$BTC $ETH $USDT
Data sources: Foresight News, The Block, Cointelegraph, ChainCatcher, SlowMist MistTrack. Price checked live on Kraken for this post. Not investment advice.
If you just came across this in the middle of the night, don't panic—but if you use Ledger, you need to read this. The crypto world's biggest security incident tonight involves nearly $90 million.
① What happened: Large numbers of Ledger users in Southeast Asia had their wallets drained. On-chain analyst Specter traced the stolen funds to hundreds of victims' wallets across Ethereum, TRON, Bitcoin, and other blockchains, with losses exceeding $86 million. MistTrack, by SlowMist, traced reported losses nearing $90 million. Tether is freezing large amounts of USDT in the associated addresses. (Foresight News)
② What went wrong: Ledger officially confirmed to The Block that it is investigating. All the devices involved were purchased from the same reseller, CryptoBilis, suggesting a possible supply chain attack. Some users may have received counterfeit or tampered-with devices. Ledger has asked the reseller to suspend sales and shipments during the investigation. This is the largest security incident in Ledger's recorded history; the previous biggest was a fake app incident involving $9.5 million. (Foresight News citing The Block; ChainCatcher)
③ Who was hit hardest: According to ChainCatcher, one user deposited 7 million USDT into a Ledger and had it stolen—possibly the largest single loss in this incident. Another address spent $5.2 million on 80 BTC four months ago and stored them in a Ledger; the entire amount was drained.
④ What you should do (Ledger's official advice): If you bought a device from CryptoBilis in the past 90 days and haven't set it up, don't set it up. If you've already set it up and are using it, immediately move your assets to a new device with a new recovery phrase. Remember: only buy hardware wallets from the official website.
⑤ What the big names are saying: Changpeng Zhao posted overnight, warning that this appears to be a supply chain attack limited to a single vendor. He said Ledger remains one of the hardware wallet brands with the longest history in the industry and called on the entire industry to help recover the funds. Trezor also responded: CryptoBilis is one of its resellers too, but its checks have so far found no similar issues. (Foresight News)
The broader market hasn't been spooked into a crash: BTC is currently at $82,642, holding above its 24-hour moving average of $82,179 (checked live on Kraken for this post at 01:43). Amid all the panic, if your money is still in your own hands, first check where you bought your wallet.
Honestly, we've all seen exchanges blow up and stablecoins lose their pegs. But the fact that even a “most secure” hardware wallet can be compromised through its supply chain is what really sends chills down your spine. Buying a wallet from a reseller to save a little money could cost you your entire principal.
💬 Where did you buy your hardware wallet? Official website / reseller / secondhand—drop your answer in the comments and let's see how many people have run into a similar trap.
#比特币 #以太坊 #Ledger #硬件钱包 #币圈安全
$BTC $ETH $USDT
Data sources: Foresight News, The Block, Cointelegraph, ChainCatcher, SlowMist MistTrack. Price checked live on Kraken for this post. Not investment advice.