đš #Ledger âs Donjon team confirmed that a tampered signer contained an unauthorized hardware implant designed to steal 24-word recovery phrases.
đ How it worked:
A hidden microcontroller captured recovery words displayed during setup.
An eSIM-enabled LTE connection transmitted the data.
Ledger says the implant did not modify the Secure Element, operating system, or transaction-signing process.
đž Potential losses: Bitquery estimated around $102M across 324 wallets, but #Ledger has not verified the total losses or number of victims.
đ Investigation: Confirmed findings involve devices sold through CryptoBilis in Southeast Asia. The reseller has halted sales, while investigators continue examining how the implant entered the devices.
đĄïž Ledgerâs advice:
Donât initialize unused devices from the affected reseller.
Move funds from potentially compromised devices to a trusted signer with a brand-new recovery phrase.
Never share your recovery phrase with anyone. #Weite2Earn #LedgerSecurity $BTC $ETH $XRP
đ How it worked:
A hidden microcontroller captured recovery words displayed during setup.
An eSIM-enabled LTE connection transmitted the data.
Ledger says the implant did not modify the Secure Element, operating system, or transaction-signing process.
đž Potential losses: Bitquery estimated around $102M across 324 wallets, but #Ledger has not verified the total losses or number of victims.
đ Investigation: Confirmed findings involve devices sold through CryptoBilis in Southeast Asia. The reseller has halted sales, while investigators continue examining how the implant entered the devices.
đĄïž Ledgerâs advice:
Donât initialize unused devices from the affected reseller.
Move funds from potentially compromised devices to a trusted signer with a brand-new recovery phrase.
Never share your recovery phrase with anyone. #Weite2Earn #LedgerSecurity $BTC $ETH $XRP