【Old Leek Watch】#Ledger调查新进展失窃暂集中单一渠道
The supply-chain issue is far too serious. Who would dare buy one after this?
Ledger’s latest response says that, based on the information currently available, the theft appears to have been concentrated among devices sold by Southeast Asian distributor CryptoBilis. It also said there is no indication that Ledger’s own security infrastructure, systems, or services were compromised.
More notably, Ledger has confirmed that an unauthorized hardware implant was found in a device belonging to an affected user.
This shifts the focus of the incident: people were initially concerned that the security mechanisms of hardware wallets might have failed. Now the key question is whether anything was tampered with at any point as the devices moved from production and shipping to delivery by distributors to users.
On-chain investigators estimate that the stolen funds may exceed $86 million, but Ledger has yet to confirm the total losses. And finding an anomaly in one device does not mean that all victims were subject to the same attack.
This incident is a wake-up call for the entire crypto industry: cold wallets can reduce the risk of online attacks, but they cannot automatically eliminate supply-chain risks. The device’s origin, where it was purchased, and the initialization process can all become security weak points.$BTC $ETH
The supply-chain issue is far too serious. Who would dare buy one after this?
Ledger’s latest response says that, based on the information currently available, the theft appears to have been concentrated among devices sold by Southeast Asian distributor CryptoBilis. It also said there is no indication that Ledger’s own security infrastructure, systems, or services were compromised.
More notably, Ledger has confirmed that an unauthorized hardware implant was found in a device belonging to an affected user.
This shifts the focus of the incident: people were initially concerned that the security mechanisms of hardware wallets might have failed. Now the key question is whether anything was tampered with at any point as the devices moved from production and shipping to delivery by distributors to users.
On-chain investigators estimate that the stolen funds may exceed $86 million, but Ledger has yet to confirm the total losses. And finding an anomaly in one device does not mean that all victims were subject to the same attack.
This incident is a wake-up call for the entire crypto industry: cold wallets can reduce the risk of online attacks, but they cannot automatically eliminate supply-chain risks. The device’s origin, where it was purchased, and the initialization process can all become security weak points.$BTC $ETH