đš YOUR HARDWARE WALLET WAS THE ATTACK VECTOR
This is the scariest supply-chain story crypto has seen in years.
Ledger confirmed it is investigating fund losses tied to reseller CryptoBilis in Southeast Asia, and told customers who bought in the last 90 days not to set up uninitialized devices. The latest finding: an unauthorized hardware implant hidden under at least one device's screen, built to intercept the recovery phrase during setup and beam it out over a cellular module. Damage estimates run from $80M to over $90M across hundreds of wallets, with Arkham tracking about $71.6M in flagged addresses ($29.4M in $ETH alone).
One victim kept his wallet untouched for 8 years. A month after moving to a new device, all 59 ETH (about $146.8K) were gone.
Ledger says its own systems were never compromised, and devices bought directly from the company look unaffected. The problem was the channel, not the vault.
The lesson the whole industry is repeating tonight: buy hardware wallets only from the manufacturer, and always verify before you trust.
Where did YOUR hardware wallet come from? đ
Not financial advice. DYOR.
#Security #CryptoSafety
This is the scariest supply-chain story crypto has seen in years.
Ledger confirmed it is investigating fund losses tied to reseller CryptoBilis in Southeast Asia, and told customers who bought in the last 90 days not to set up uninitialized devices. The latest finding: an unauthorized hardware implant hidden under at least one device's screen, built to intercept the recovery phrase during setup and beam it out over a cellular module. Damage estimates run from $80M to over $90M across hundreds of wallets, with Arkham tracking about $71.6M in flagged addresses ($29.4M in $ETH alone).
One victim kept his wallet untouched for 8 years. A month after moving to a new device, all 59 ETH (about $146.8K) were gone.
Ledger says its own systems were never compromised, and devices bought directly from the company look unaffected. The problem was the channel, not the vault.
The lesson the whole industry is repeating tonight: buy hardware wallets only from the manufacturer, and always verify before you trust.
Where did YOUR hardware wallet come from? đ
Not financial advice. DYOR.
#Security #CryptoSafety