Security· ★★★★· bearish·

Ledger finds seed-phrase skimmer in resold hardware wallets

  • —Attackers bought genuine devices, opened them and fitted a seed-phrase skimmer
  • —The tampered units came through a resale channel in Southeast Asia and Hong Kong
  • —Ledger said its chips, operating system and servers were not compromised
  • —The Genuine Check does not detect physical tampering, Ledger warned
Why it matters: Holders who bought Ledger devices through secondary channels should generate a new seed phrase and move their assets.
Source: TokenPost