Ledger investigates CryptoBilis: changing devices doesn’t mean changing your recovery phrase
Recent Ledger buyers from CryptoBilis should first check when they made their purchase and follow official guidance on handling their devices, rather than waiting for the loss figures to be finalized. Current evidence is insufficient to conclude that all Ledger devices are affected.
On October 9, Ledger said it was investigating reports of asset losses involving users in Southeast Asia and had asked distributor CryptoBilis to suspend sales and shipments. For buyers covered by the announcement who purchased within the past 90 days, those who have not set up their devices should not do so; those who have already set them up are advised to consider moving their assets to a new Ledger device and using a fresh recovery phrase.
A common mistake here is buying a new device but importing the old recovery phrase. If someone else already knows the old phrase, changing devices will not revoke their ability to control the wallet. What needs to be changed is the wallet credential, not just the device itself. However, this does not mean the incident has been confirmed to have been caused by a leaked recovery phrase.
As of this check, Ledger has not confirmed the total losses, the number of people affected, or the root cause. The company told Cointelegraph that it had not received related reports involving devices purchased directly from Ledger and said its own systems had not been breached. This is the company’s response; it does not mean an independent investigation is complete, nor can it guarantee that other devices are absolutely safe.
When contacting support, navigate to Ledger’s official website yourself. Never provide your recovery phrase to customer support, in a direct message, or on a webpage; the company will never ask for it.
Over the next 48 hours, I’ll watch for any expansion of the affected purchase channels or time period, as well as verifiable information about the root cause and remediation. If similar cases are confirmed through other channels, I’ll broaden the alert. I’ll lower the risk level only once the scope of impact is clear and the relevant remediation has been verified—not simply because sales resume.
#Ledger #硬件钱包 #AssetSecurity
Recent Ledger buyers from CryptoBilis should first check when they made their purchase and follow official guidance on handling their devices, rather than waiting for the loss figures to be finalized. Current evidence is insufficient to conclude that all Ledger devices are affected.
On October 9, Ledger said it was investigating reports of asset losses involving users in Southeast Asia and had asked distributor CryptoBilis to suspend sales and shipments. For buyers covered by the announcement who purchased within the past 90 days, those who have not set up their devices should not do so; those who have already set them up are advised to consider moving their assets to a new Ledger device and using a fresh recovery phrase.
A common mistake here is buying a new device but importing the old recovery phrase. If someone else already knows the old phrase, changing devices will not revoke their ability to control the wallet. What needs to be changed is the wallet credential, not just the device itself. However, this does not mean the incident has been confirmed to have been caused by a leaked recovery phrase.
As of this check, Ledger has not confirmed the total losses, the number of people affected, or the root cause. The company told Cointelegraph that it had not received related reports involving devices purchased directly from Ledger and said its own systems had not been breached. This is the company’s response; it does not mean an independent investigation is complete, nor can it guarantee that other devices are absolutely safe.
When contacting support, navigate to Ledger’s official website yourself. Never provide your recovery phrase to customer support, in a direct message, or on a webpage; the company will never ask for it.
Over the next 48 hours, I’ll watch for any expansion of the affected purchase channels or time period, as well as verifiable information about the root cause and remediation. If similar cases are confirmed through other channels, I’ll broaden the alert. I’ll lower the risk level only once the scope of impact is clear and the relevant remediation has been verified—not simply because sales resume.
#Ledger #硬件钱包 #AssetSecurity