#Ledger确认用户设备遭植入未授权硬件
👉 冷钱包也能被做手脚 进群聊聊你的资产到底怎么放最稳
$93.2 million was drained overnight from 315 wallets. The weapon was that device touted as the safest hardware cold wallet 🦖
This time, the trouble came from devices sold through Ledger’s official authorized channel. Machines shipped by Southeast Asian distributor CryptoBilis were found to have unauthorized hardware modules implanted in them. In other words, that brand-new-looking, factory-sealed cold wallet in your hands may have been tampered with before it ever left the factory ⚠️
On-chain data is still climbing. Analytics firm Bitquery tracked about $93.2 million involving 315 wallets across 6 major blockchains. Another firm, YFarmX, reported even more sharply: 7 chains, 521 addresses, totaling about $94.5 million. The stolen assets were mainly USDT and TRON tokens. As of October 11, about $81 million was still sitting on-chain and traceable, while some funds had already been laundered through Tornado Cash and Zcash once.
The only good news is that stablecoins can be frozen. Tether has frozen $10 million worth of USDT, something Bitcoin and Ethereum cannot do. Issuers can lock down implicated funds with a single action ⚖️
Ledger’s position is that the problem was limited to this one distributor and that its own internal systems were not breached. But many online are not buying it, because CryptoBilis is an authorized channel listed on Ledger’s official website. One commenter put it bluntly: this is not the distributor’s accident; it is Ledger’s accident. You have to own it.
What’s even more interesting is how market sentiment has been completely shifted. Bitcoin analyst Plan B said he moved his coins into spot ETFs in 2025 and has zero regrets. 21Shares co-founder Ophelia Snyder added that the security of self-custody depends on your own technical ability; if set up improperly, it will never be better than handing it to a professional institution. On the other side, Blockstream’s Adam Back insists hardware wallets are fine, and that manufacturers simply need to add lessons in threat modeling.
My view: what got shaken this time is not a brand, but the consensus that self-custody equals absolute safety. The attack surface is moving from the chain to the supply chain, from code to shipping boxes. As long as someone handles it along the way, there is a chance it gets tampered with. For ordinary users, what’s worth watching is not whether to change wallets, but where your device actually came from and whether it has been opened a second time.
Are you still using a hardware wallet? Staying with self-custody, or have you already switched to ETFs? Let’s talk in the comments 🦕
Follow along every day for crypto security hot topics. Not just what happened in the news, but also the logic and opportunities behind it 👀🚀
👉 冷钱包也能被做手脚 进群聊聊你的资产到底怎么放最稳
$93.2 million was drained overnight from 315 wallets. The weapon was that device touted as the safest hardware cold wallet 🦖
This time, the trouble came from devices sold through Ledger’s official authorized channel. Machines shipped by Southeast Asian distributor CryptoBilis were found to have unauthorized hardware modules implanted in them. In other words, that brand-new-looking, factory-sealed cold wallet in your hands may have been tampered with before it ever left the factory ⚠️
On-chain data is still climbing. Analytics firm Bitquery tracked about $93.2 million involving 315 wallets across 6 major blockchains. Another firm, YFarmX, reported even more sharply: 7 chains, 521 addresses, totaling about $94.5 million. The stolen assets were mainly USDT and TRON tokens. As of October 11, about $81 million was still sitting on-chain and traceable, while some funds had already been laundered through Tornado Cash and Zcash once.
The only good news is that stablecoins can be frozen. Tether has frozen $10 million worth of USDT, something Bitcoin and Ethereum cannot do. Issuers can lock down implicated funds with a single action ⚖️
Ledger’s position is that the problem was limited to this one distributor and that its own internal systems were not breached. But many online are not buying it, because CryptoBilis is an authorized channel listed on Ledger’s official website. One commenter put it bluntly: this is not the distributor’s accident; it is Ledger’s accident. You have to own it.
What’s even more interesting is how market sentiment has been completely shifted. Bitcoin analyst Plan B said he moved his coins into spot ETFs in 2025 and has zero regrets. 21Shares co-founder Ophelia Snyder added that the security of self-custody depends on your own technical ability; if set up improperly, it will never be better than handing it to a professional institution. On the other side, Blockstream’s Adam Back insists hardware wallets are fine, and that manufacturers simply need to add lessons in threat modeling.
My view: what got shaken this time is not a brand, but the consensus that self-custody equals absolute safety. The attack surface is moving from the chain to the supply chain, from code to shipping boxes. As long as someone handles it along the way, there is a chance it gets tampered with. For ordinary users, what’s worth watching is not whether to change wallets, but where your device actually came from and whether it has been opened a second time.
Are you still using a hardware wallet? Staying with self-custody, or have you already switched to ETFs? Let’s talk in the comments 🦕
Follow along every day for crypto security hot topics. Not just what happened in the news, but also the logic and opportunities behind it 👀🚀