An Ordinary Person’s Investing Journey | Day 157: Ledger CryptoBilis Supply Chain Hacked for Approximately $90 Million!
I. Web3
1️⃣ No airdrops this weekend, so I can finally take a break.
2️⃣ There’s a stablecoin savings product next door offering 8% annualized returns, with funds available on demand and withdrawals anytime. Pretty convenient. If you have idle funds, you can check it out.
3️⃣ An’an Wallet has a TRX promotion. Be cautious about participating in Justin Sun’s projects, but you can still make money from Sun’s schemes. Wallets are generally vetted by Binance, so they’re somewhat more trustworthy than ordinary projects.
II. Hong Kong Stock IPO Subscriptions
1️⃣ A new airdrop is live: Transsion Holdings, the king of mobile phones in Africa. The subscription period ends on October 12. A detailed analysis has been posted on the official account.
III. Other
1️⃣ I hadn’t run for almost a week. Went for a 10-kilometer walk/run tonight. Now that the race is over, I can’t just stop running. I still need to exercise regularly and keep running. No need to push too hard—just finish the run.
2️⃣ Fear and Greed Index: 56, neutral. AHR999 Index: 0.53, suitable for dollar-cost averaging. $BTC at 82,000; $ETH at 2,500; $BNB at 740. Basically unchanged, which is great. U.S. spot BTC and ETH ETFs continue to see outflows. Institutions are pulling back temporarily, limiting the strength of any rebound, and the market lacks strong buying support in the short term.
3️⃣ The Ledger CryptoBilis supply chain was hacked for approximately $90 million. This was not a hack of Ledger’s official website servers, nor a firmware vulnerability in Ledger itself. The hardware wallet supply chain of 【CryptoBilis, an authorized Southeast Asian distributor】 was compromised. Initial estimates indicate that hundreds of wallets were affected. After obtaining the funds, the hackers used several laundering methods: some ETH was sent to Tornado Cash for mixing; some USDT was bridged to Tron and swapped for USDD; most of the stolen funds remain in addresses controlled by the hackers, and have not yet been dumped on a large scale. Some exchanges have already tried to freeze the associated addresses. Here are the lessons:
1. Hardware wallet security isn’t just about the chip and firmware—the supply chain is a major risk. Even if the packaging is intact, hardware purchased through non-official channels could still have been tampered with.
2. Don’t buy hardware wallets through third-party purchasing agents, overseas distributors, or second-hand marketplaces. Buy directly from the official website whenever possible.
3. Once your recovery phrase has been read off the screen, your cold wallet is no longer secure.
#国务院提出建设国家区块链网络 #STRK24小时上涨约20% #XRP账本修复可增发XRP的漏洞 #CFTC拟将事件合约纳入掉期监管 #Ledger暂停CryptoBilis销售
I. Web3
1️⃣ No airdrops this weekend, so I can finally take a break.
2️⃣ There’s a stablecoin savings product next door offering 8% annualized returns, with funds available on demand and withdrawals anytime. Pretty convenient. If you have idle funds, you can check it out.
3️⃣ An’an Wallet has a TRX promotion. Be cautious about participating in Justin Sun’s projects, but you can still make money from Sun’s schemes. Wallets are generally vetted by Binance, so they’re somewhat more trustworthy than ordinary projects.
II. Hong Kong Stock IPO Subscriptions
1️⃣ A new airdrop is live: Transsion Holdings, the king of mobile phones in Africa. The subscription period ends on October 12. A detailed analysis has been posted on the official account.
III. Other
1️⃣ I hadn’t run for almost a week. Went for a 10-kilometer walk/run tonight. Now that the race is over, I can’t just stop running. I still need to exercise regularly and keep running. No need to push too hard—just finish the run.
2️⃣ Fear and Greed Index: 56, neutral. AHR999 Index: 0.53, suitable for dollar-cost averaging. $BTC at 82,000; $ETH at 2,500; $BNB at 740. Basically unchanged, which is great. U.S. spot BTC and ETH ETFs continue to see outflows. Institutions are pulling back temporarily, limiting the strength of any rebound, and the market lacks strong buying support in the short term.
3️⃣ The Ledger CryptoBilis supply chain was hacked for approximately $90 million. This was not a hack of Ledger’s official website servers, nor a firmware vulnerability in Ledger itself. The hardware wallet supply chain of 【CryptoBilis, an authorized Southeast Asian distributor】 was compromised. Initial estimates indicate that hundreds of wallets were affected. After obtaining the funds, the hackers used several laundering methods: some ETH was sent to Tornado Cash for mixing; some USDT was bridged to Tron and swapped for USDD; most of the stolen funds remain in addresses controlled by the hackers, and have not yet been dumped on a large scale. Some exchanges have already tried to freeze the associated addresses. Here are the lessons:
1. Hardware wallet security isn’t just about the chip and firmware—the supply chain is a major risk. Even if the packaging is intact, hardware purchased through non-official channels could still have been tampered with.
2. Don’t buy hardware wallets through third-party purchasing agents, overseas distributors, or second-hand marketplaces. Buy directly from the official website whenever possible.
3. Once your recovery phrase has been read off the screen, your cold wallet is no longer secure.
#国务院提出建设国家区块链网络 #STRK24小时上涨约20% #XRP账本修复可增发XRP的漏洞 #CFTC拟将事件合约纳入掉期监管 #Ledger暂停CryptoBilis销售