Security· ★★★★· bearish·

Ledger reveals details of months-long supply-chain attack on wallets

  • —Attackers bought and opened genuine Ledger devices, implanting hardware to capture seed phrases
  • —Third-party distribution channels in Southeast Asia and Hong Kong were affected
  • —Ledger ordered resellers to pause sales and stop displaying devices on open shelves
  • —Secure chips, the BOLOS operating system and Ledger's own servers were not compromised
Why it matters: The supply-chain attack undermines trust in buying hardware wallets from third-party sellers and puts user funds at risk of theft.
Source: Koin Bülteni
More on this
Security · yesterday
Supply-chain attack on Ledger devices in Southeast Asia nets hackers about $93 million
 Security · Oct 11
Ledger supply-chain attack spreads to Europe as user finds hardware implant in wallet
 Security · Oct 10
Reported Ledger Supply-Chain Attack Drains 213.42 BTC Worth $17.7M