#ledger暂停cryptobilis销售
Damn, who would’ve thought that you could spend money on a cold wallet to protect your assets, only to find out that the cold wallet itself might be a mole?
Imagine you bought 80 $BTC at 65K in June, with $1.38 million in unrealized gains. Worried that an exchange wasn’t safe, you decided to transfer it all to a Ledger cold wallet.
Then, a week later, all 80 BTC vanished.
You didn’t sign any dodgy contracts, and you never entered your recovery phrase online. The problem might have been the device you bought.
When former Mt.Gox CEO Mark Karpelès took apart a Ledger from Malaysia, he found suspicious hardware hidden where the screen’s cushioning pad was— including an LTE communication module, an eSIM, and a microcontroller.
According to security researchers, this setup could theoretically read the recovery phrase displayed on the screen and transmit it over a mobile network.
You think you’re keeping your private keys offline, but the device might have a SIM card inside that can connect to the internet.
Meanwhile, users associated with Southeast Asian reseller CryptoBilis reported massive asset losses, with on-chain analysis estimating the amount involved at nearly $90 million.
What gives me the chills most about this is:
You can distrust exchanges, avoid signing dodgy contracts, and lock your recovery phrase in a safe—but how can you be sure the hardware you bought hasn’t been tampered with?
I used to think a cold wallet was the last line of defense. Now I realize the supply chain itself could be the most dangerous weak link.
Anyone here who knows hardware security—besides buying directly from the official website, what are some reliable ways to guard against this kind of supply-chain attack? 🙏
Seriously, you have to watch out for hackers and phishing—and in the end, even the people selling you the wallet.
$BTC #Ledger #加密安全
Damn, who would’ve thought that you could spend money on a cold wallet to protect your assets, only to find out that the cold wallet itself might be a mole?
Imagine you bought 80 $BTC at 65K in June, with $1.38 million in unrealized gains. Worried that an exchange wasn’t safe, you decided to transfer it all to a Ledger cold wallet.
Then, a week later, all 80 BTC vanished.
You didn’t sign any dodgy contracts, and you never entered your recovery phrase online. The problem might have been the device you bought.
When former Mt.Gox CEO Mark Karpelès took apart a Ledger from Malaysia, he found suspicious hardware hidden where the screen’s cushioning pad was— including an LTE communication module, an eSIM, and a microcontroller.
According to security researchers, this setup could theoretically read the recovery phrase displayed on the screen and transmit it over a mobile network.
You think you’re keeping your private keys offline, but the device might have a SIM card inside that can connect to the internet.
Meanwhile, users associated with Southeast Asian reseller CryptoBilis reported massive asset losses, with on-chain analysis estimating the amount involved at nearly $90 million.
What gives me the chills most about this is:
You can distrust exchanges, avoid signing dodgy contracts, and lock your recovery phrase in a safe—but how can you be sure the hardware you bought hasn’t been tampered with?
I used to think a cold wallet was the last line of defense. Now I realize the supply chain itself could be the most dangerous weak link.
Anyone here who knows hardware security—besides buying directly from the official website, what are some reliable ways to guard against this kind of supply-chain attack? 🙏
Seriously, you have to watch out for hackers and phishing—and in the end, even the people selling you the wallet.
$BTC #Ledger #加密安全