#ledger确认用户设备遭植入未授权硬件
It didn’t touch your private key. It just watched your screen.
▪️ The manufacturer confirmed that at least one affected device contained an unauthorized hardware implant
▪️ The method: install a microcontroller inside the device and connect it to the screen’s data cable
▪️ When the wallet was set up, the recovery phrase displayed on the screen was recorded word by word and sent out
▪️ On-chain estimates suggest about 311 wallets were involved, worth approximately $92.9 million
The entire security premise of a hardware wallet is that the private key never leaves the device. This implant didn’t challenge that premise—it didn’t read the private key. It recorded the screen.
The secure element protects against the private key being read, but it can’t control what’s displayed on the screen. People need to see the recovery phrase to write it down; those few seconds as each word appears on the screen are the attack window.
The hardest thing to guard against is that nothing appears out of the ordinary. The device boots normally, passes verification, signs transactions as usual, and its packaging is intact. Everything the user can see looks right—the problem is the circuit they can’t see.
The module was hidden beneath the screen padding. Finding it requires taking the device apart—and once you do, it’s no longer “factory original” and the warranty is gone. The very act of verifying the device can destroy the object being verified.
Keep an eye on three things: whether the manufacturer publishes the full list of affected batches, whether distributors introduce verification upon opening, and whether the label “official authorized reseller” gets redefined.
If your recovery phrase has ever appeared on a device bought through an unofficial channel, would you keep using it?
$BTC
It didn’t touch your private key. It just watched your screen.
▪️ The manufacturer confirmed that at least one affected device contained an unauthorized hardware implant
▪️ The method: install a microcontroller inside the device and connect it to the screen’s data cable
▪️ When the wallet was set up, the recovery phrase displayed on the screen was recorded word by word and sent out
▪️ On-chain estimates suggest about 311 wallets were involved, worth approximately $92.9 million
The entire security premise of a hardware wallet is that the private key never leaves the device. This implant didn’t challenge that premise—it didn’t read the private key. It recorded the screen.
The secure element protects against the private key being read, but it can’t control what’s displayed on the screen. People need to see the recovery phrase to write it down; those few seconds as each word appears on the screen are the attack window.
The hardest thing to guard against is that nothing appears out of the ordinary. The device boots normally, passes verification, signs transactions as usual, and its packaging is intact. Everything the user can see looks right—the problem is the circuit they can’t see.
The module was hidden beneath the screen padding. Finding it requires taking the device apart—and once you do, it’s no longer “factory original” and the warranty is gone. The very act of verifying the device can destroy the object being verified.
Keep an eye on three things: whether the manufacturer publishes the full list of affected batches, whether distributors introduce verification upon opening, and whether the label “official authorized reseller” gets redefined.
If your recovery phrase has ever appeared on a device bought through an unofficial channel, would you keep using it?
$BTC