Security· ★★★★· bearish·

Ledger and Coldcard incidents reignite debate over self-custody safety

  • —Ledger: hidden component in some devices collected seed phrases during setup
  • —Ledger blames a supply-chain attack, not a flaw in its chip, OS or servers
  • —Coldcard firmware bug let attackers reproduce private keys and drain funds
  • —Installing patched Coldcard firmware does not fix previously created vulnerable wallets
Why it matters: Supply-chain and firmware attacks show that keeping a device offline does not by itself guarantee the safety of funds.
Source: TokenPost
More on this
Security · Oct 13
Santiment flags surge in crypto security fears after Coldcard and Ledger incidents
 DeFi · Oct 9
XRP Ledger Update Reignites Centralization Debate
 Security · Oct 13
After Ledger Reseller Hack, Austin Campbell Says Self-Custody Users Should 'Over-Solve for Simplicity'