#Ledger确认用户设备遭植入未授权硬件
Ledger confirms: Extra hardware was installed in one affected cold wallet
On October 10, Ledger updated its investigation into the CryptoBilis incident: an unauthorized hardware implant was found in a device belonging to an affected user. The day before, the company had asked the Southeast Asian distributor to suspend sales and shipments.$BTC
This development brings the investigation into the realm of physical evidence. Where in the supply chain the device was tampered with, which batches were involved, and how the implant worked all have implications for the safety of other buyers’ funds. So far, one device has been confirmed. The full attack method and its connection to the total losses are still under investigation. The reported loss of $86 million circulating online is also a third-party estimate.$ETH
The official guidance for affected buyers includes a specific instruction: devices purchased through CryptoBilis in the 90 days before the warning that have not yet been set up should not be initialized for now. Users who have already set up their devices should consider transferring their assets to a new device and using a newly generated recovery phrase.
Switching devices and importing an old recovery phrase restores the same set of accounts. If the old phrase has been exposed, the other party will still have access; changing the PIN will not solve the problem. Funds need to be transferred to accounts associated with a new recovery phrase.
People who buy a cold wallet can hardly be expected to conduct their own hardware inspection. The manufacturer needs to provide details of affected batches, practical ways to identify affected devices, and a remedy for users who have been harmed. When the sales channel fails, buyers should not be left to bear the verification costs indefinitely.
#Ledger #加密安全 #CryptoBilis
Ledger confirms: Extra hardware was installed in one affected cold wallet
On October 10, Ledger updated its investigation into the CryptoBilis incident: an unauthorized hardware implant was found in a device belonging to an affected user. The day before, the company had asked the Southeast Asian distributor to suspend sales and shipments.$BTC
This development brings the investigation into the realm of physical evidence. Where in the supply chain the device was tampered with, which batches were involved, and how the implant worked all have implications for the safety of other buyers’ funds. So far, one device has been confirmed. The full attack method and its connection to the total losses are still under investigation. The reported loss of $86 million circulating online is also a third-party estimate.$ETH
The official guidance for affected buyers includes a specific instruction: devices purchased through CryptoBilis in the 90 days before the warning that have not yet been set up should not be initialized for now. Users who have already set up their devices should consider transferring their assets to a new device and using a newly generated recovery phrase.
Switching devices and importing an old recovery phrase restores the same set of accounts. If the old phrase has been exposed, the other party will still have access; changing the PIN will not solve the problem. Funds need to be transferred to accounts associated with a new recovery phrase.
People who buy a cold wallet can hardly be expected to conduct their own hardware inspection. The manufacturer needs to provide details of affected batches, practical ways to identify affected devices, and a remedy for users who have been harmed. When the sales channel fails, buyers should not be left to bear the verification costs indefinitely.
#Ledger #加密安全 #CryptoBilis