#ledger确认用户设备遭植入未授权硬件
A hardware wallet bought through an officially authorized channel was found to contain a chip that shouldn’t have been there. Estimated losses: $86 million 🦖
🕐 最新解读群里更新
Ledger confirmed in a post on Sunday, October 11, that an unauthorized hardware component had been found implanted in a user’s device. Investigator Specter estimates that losses in this incident could exceed $86 million, involving Bitcoin, Ethereum, and Tron ⚠️
The affected devices came from CryptoBilis, a Southeast Asian distributor and an authorized Ledger reseller in Indonesia, Malaysia, and the Philippines.
“Authorized,” “genuine,” and “official channel” are the kinds of words that make people feel safe. And yet the very thing that failed this time was one of those officially authorized channels 🔒
As for the parties’ responses, CryptoBilis has suspended sales of all hardware wallet inventory pending the investigation’s findings. Ledger, meanwhile, has stressed that the incident is limited to this one distributor and its market, and that its own infrastructure, systems, and services were not compromised. It has also issued two recommendations: don’t initialize devices that haven’t been set up yet; if you’ve already set yours up, consider moving your assets to a new signing device using a fresh recovery phrase.
The distinction here is worth noting: so far, Ledger has not confirmed how many customers were affected or the actual amount of the losses. The $86 million figure comes from a third-party investigator’s estimate, not an official figure.
Put simply, the security of a cold wallet doesn’t depend only on the chip itself. It also depends on every step along the way before the device reaches you. Buying through an official channel doesn’t guarantee that every link in the supply chain is free from tampering. That’s what we should be paying closest attention to. If this kind of hardware implant becomes part of a repeatable supply chain, the entire idea of self-custody will need to be reassessed 💥
One more thing: Tether has also frozen USDT connected to this case, showing that on-chain tracking is already underway. A hardware-level vulnerability ultimately still requires on-chain data to track down those responsible.
Would you buy a hardware wallet from a third-party distributor to save a few dozen dollars, or would you rather pay a little more and buy directly from the official store? Let’s talk in the comments.
Every day, we bring you the latest in crypto security—not just what happened, but the logic and opportunities behind the news 👀🚀
Tap the profile picture to watch the livestream
A hardware wallet bought through an officially authorized channel was found to contain a chip that shouldn’t have been there. Estimated losses: $86 million 🦖
🕐 最新解读群里更新
Ledger confirmed in a post on Sunday, October 11, that an unauthorized hardware component had been found implanted in a user’s device. Investigator Specter estimates that losses in this incident could exceed $86 million, involving Bitcoin, Ethereum, and Tron ⚠️
The affected devices came from CryptoBilis, a Southeast Asian distributor and an authorized Ledger reseller in Indonesia, Malaysia, and the Philippines.
“Authorized,” “genuine,” and “official channel” are the kinds of words that make people feel safe. And yet the very thing that failed this time was one of those officially authorized channels 🔒
As for the parties’ responses, CryptoBilis has suspended sales of all hardware wallet inventory pending the investigation’s findings. Ledger, meanwhile, has stressed that the incident is limited to this one distributor and its market, and that its own infrastructure, systems, and services were not compromised. It has also issued two recommendations: don’t initialize devices that haven’t been set up yet; if you’ve already set yours up, consider moving your assets to a new signing device using a fresh recovery phrase.
The distinction here is worth noting: so far, Ledger has not confirmed how many customers were affected or the actual amount of the losses. The $86 million figure comes from a third-party investigator’s estimate, not an official figure.
Put simply, the security of a cold wallet doesn’t depend only on the chip itself. It also depends on every step along the way before the device reaches you. Buying through an official channel doesn’t guarantee that every link in the supply chain is free from tampering. That’s what we should be paying closest attention to. If this kind of hardware implant becomes part of a repeatable supply chain, the entire idea of self-custody will need to be reassessed 💥
One more thing: Tether has also frozen USDT connected to this case, showing that on-chain tracking is already underway. A hardware-level vulnerability ultimately still requires on-chain data to track down those responsible.
Would you buy a hardware wallet from a third-party distributor to save a few dozen dollars, or would you rather pay a little more and buy directly from the official store? Let’s talk in the comments.
Every day, we bring you the latest in crypto security—not just what happened, but the logic and opportunities behind the news 👀🚀
Tap the profile picture to watch the livestream