NaiPi-奶啤

CZ published a "Crypto Asset Custody Guide." Its core message boils down to one sentence: There is no absolutely secure way to custody your assets—only the approach that works for you. Find a balance between "self-custody" and "leaving them with a platform" based on the size of your assets and your technical expertise.
A breakdown of the guide's key points (the essentials)
1. Self-custody (managing your own funds) — best for tech-savvy users
• ✅ Use a hardware wallet (an offline device) to store your private keys
• ✅ Keep multiple backups in different locations (don't put all your eggs in one basket)
• ✅ Carefully verify transaction addresses (to avoid phishing)
• ❌ Never take screenshots or photos of your private keys (they could sync to the cloud and be stolen by hackers)

In October 2025, hardware wallet manufacturer Ledger faced an unprecedented crisis of confidence. More than 300 users reported stolen assets, with independent investigators estimating losses of between $86 million and $92.9 million. As the investigation deepened, a Southeast Asian distributor called CryptoBilis came into the public eye—and numerous questions surrounding changes in its ownership cast an even more complex shadow over the supply chain attack.
The heart of the incident: confirmation of a supply chain attack
In early October, Ledger officially confirmed that some users’ devices had been maliciously tampered with before initialization. By physically implanting or preloading seed phrases, the attackers caused users to transfer their assets, unknowingly, to wallets controlled by hackers. Ledger acted quickly, asking CryptoBilis to suspend sales and advising users who had purchased devices through the distributor in the past 90 days to stop using the associated wallets immediately and transfer their assets to new, secure addresses.