#Tether冻结Ledger盗窃案相关USDT
$Ledger has disclosed a large-scale theft of funds, with estimated losses exceeding $86 million and hundreds of wallets affected.
The core issue lies with an authorized reseller.
Ledger has asked its Southeast Asian reseller CryptoBilis to suspend sales and shipments, and advised users who bought devices through this channel in the past 90 days: if you haven’t set yours up, don’t; if you have, move your assets.
CZ’s assessment is that this appears to be a supply-chain attack limited to a single supplier, and that a small number of users may have received counterfeit or tampered-with devices.
A former Mt. Gox CEO even took a device apart and found a spy chip hidden beneath the screen gasket. It could remotely transmit the recovery phrase over LTE.
That’s the most ironic thing about hardware wallets:
You buy one so your “private keys never go online.”
But attackers can build a connection to the internet into the device after it leaves the factory and before it reaches you.
The moment you enter your recovery phrase, it’s already been sent.
The security of a hardware wallet has never depended on the chip alone.
It depends on who you bought it from.
So, are there any other safer ways to store cryptocurrency?
$Ledger has disclosed a large-scale theft of funds, with estimated losses exceeding $86 million and hundreds of wallets affected.
The core issue lies with an authorized reseller.
Ledger has asked its Southeast Asian reseller CryptoBilis to suspend sales and shipments, and advised users who bought devices through this channel in the past 90 days: if you haven’t set yours up, don’t; if you have, move your assets.
CZ’s assessment is that this appears to be a supply-chain attack limited to a single supplier, and that a small number of users may have received counterfeit or tampered-with devices.
A former Mt. Gox CEO even took a device apart and found a spy chip hidden beneath the screen gasket. It could remotely transmit the recovery phrase over LTE.
That’s the most ironic thing about hardware wallets:
You buy one so your “private keys never go online.”
But attackers can build a connection to the internet into the device after it leaves the factory and before it reaches you.
The moment you enter your recovery phrase, it’s already been sent.
The security of a hardware wallet has never depended on the chip alone.
It depends on who you bought it from.
So, are there any other safer ways to store cryptocurrency?