Security· ★★★★★· bearish·

Supply-chain attack on Ledger devices in Southeast Asia nets hackers about $93 million

  • —About $93 million stolen from 311 wallets on Bitcoin, Ethereum, Tron, BNB Chain and Polygon
  • —Tampering occurred at CryptoBilis warehouses in Indonesia, Malaysia and the Philippines
  • —A spy module with a microcontroller, antenna and eSIM captured the seed phrase from the screen on first setup
  • —Ledger's standard Genuine Check cannot detect foreign components soldered onto the board
Why it matters: The compromise of an official supply chain undermines trust in self-custody and could push investors toward bitcoin ETFs.
Source: The Cryptonomist (IT)