🚨 #Ledger ’s Donjon team confirmed that a tampered signer contained an unauthorized hardware implant designed to steal 24-word recovery phrases.
🔍 How it worked:
A hidden microcontroller captured recovery words displayed during setup.
An eSIM-enabled LTE connection transmitted the data.
Ledger says the implant did not modify the Secure Element, operating system, or transaction-signing process.
💸 Potential losses: Bitquery estimated around $102M across 324 wallets, but #Ledger has not verified the total losses or number of victims.
📍 Investigation: Confirmed findings involve devices sold through CryptoBilis in Southeast Asia. The reseller has halted sales, while investigators continue examining how the implant entered the devices.
🛡️ Ledger’s advice:
Don’t initialize unused devices from the affected reseller.
Move funds from potentially compromised devices to a trusted signer with a brand-new recovery phrase.
Never share your recovery phrase with anyone. #Weite2Earn #LedgerSecurity $BTC $ETH $XRP
🔍 How it worked:
A hidden microcontroller captured recovery words displayed during setup.
An eSIM-enabled LTE connection transmitted the data.
Ledger says the implant did not modify the Secure Element, operating system, or transaction-signing process.
💸 Potential losses: Bitquery estimated around $102M across 324 wallets, but #Ledger has not verified the total losses or number of victims.
📍 Investigation: Confirmed findings involve devices sold through CryptoBilis in Southeast Asia. The reseller has halted sales, while investigators continue examining how the implant entered the devices.
🛡️ Ledger’s advice:
Don’t initialize unused devices from the affected reseller.
Move funds from potentially compromised devices to a trusted signer with a brand-new recovery phrase.
Never share your recovery phrase with anyone. #Weite2Earn #LedgerSecurity $BTC $ETH $XRP