Security· ★★★★★· bearish·

Ledger finds spy implant in wallets as XRP closes 2015 code flaw

  • —Ledger: spy module found in wallets sold via CryptoBilis, losses from $86 million
  • —CryptoBilis has suspended sales of Ledger hardware wallets
  • —RippleX patched a 2015 XRP Ledger bug that could mint XRP
  • —The flaw was discovered on Sept 22 and fixed Sept 25 without disclosure
Why it matters: The Ledger supply-chain attack undermines trust in hardware wallets, while the XRP bug raises questions about the token's fixed supply.
Source: Block-Builders