#Ledger继续暴雷
‼️Attention everyone using a Ledger hardware wallet‼️
Ledger has confirmed that some devices were implanted with malicious hardware. Using LTE chips and eSIMs, hackers sent out the recovery phrases users saw during initial setup.
On-chain organizations estimate losses of over $93 million. Most absurdly, the security chip was completely normal, and the devices even passed official authenticity checks.
For over a decade, the crypto community has taught users: don’t take screenshots, don’t go online, and don’t tell anyone your recovery phrase.
But this time, users dutifully wrote their 24 words down on paper—while hackers were already waiting inside the device.
I believe the hardware wallet manufacturers should be the ones under the most pressure over this.
If you expect users to take 100% responsibility for their own assets, you should give them the means to verify that their devices are secure.
Otherwise, users are buying a hardware wallet that costs hundreds of dollars, while bearing the security risks of the entire supply chain.
What’s especially ironic is that CryptoBilis, the distributor involved, was an authorized reseller.
Today, similar reports of tampering have emerged in Europe at MediaMarkt. All Ledger products have now been removed from MediaMarkt’s stores and website.
Two questions:
First, who can prove that devices already sold haven’t been tampered with?
Second, if users buy through an officially authorized channel and still get robbed, who should bear the loss?
If there are no answers to these two questions, then “Not your keys, not your coins” may need an addition:
Not your hardware, not your security. Better keep it on Binance!
#Ledger #CryptoSecurity
‼️Attention everyone using a Ledger hardware wallet‼️
Ledger has confirmed that some devices were implanted with malicious hardware. Using LTE chips and eSIMs, hackers sent out the recovery phrases users saw during initial setup.
On-chain organizations estimate losses of over $93 million. Most absurdly, the security chip was completely normal, and the devices even passed official authenticity checks.
For over a decade, the crypto community has taught users: don’t take screenshots, don’t go online, and don’t tell anyone your recovery phrase.
But this time, users dutifully wrote their 24 words down on paper—while hackers were already waiting inside the device.
I believe the hardware wallet manufacturers should be the ones under the most pressure over this.
If you expect users to take 100% responsibility for their own assets, you should give them the means to verify that their devices are secure.
Otherwise, users are buying a hardware wallet that costs hundreds of dollars, while bearing the security risks of the entire supply chain.
What’s especially ironic is that CryptoBilis, the distributor involved, was an authorized reseller.
Today, similar reports of tampering have emerged in Europe at MediaMarkt. All Ledger products have now been removed from MediaMarkt’s stores and website.
Two questions:
First, who can prove that devices already sold haven’t been tampered with?
Second, if users buy through an officially authorized channel and still get robbed, who should bear the loss?
If there are no answers to these two questions, then “Not your keys, not your coins” may need an addition:
Not your hardware, not your security. Better keep it on Binance!
#Ledger #CryptoSecurity
