Ledger Investigates Suspected Hardware Wallet Tampering
Ledger is investigating reports that tampered hardware wallets may have been used in a cryptocurrency theft campaign linked to products sold through reseller CryptoBillis.
The reports emerged after users, primarily in Southeast Asia, said their crypto accounts had been drained. Ledger has confirmed that at least one affected device contained an unauthorized hardware implant.
According to reports cited by The Verge, the incident may have resulted in more than $86 million in stolen cryptocurrency from hundreds of wallets. The full scope of the incident has not yet been independently confirmed, and the investigation remains ongoing.
How the Suspected Attack May Have Worked
Photos and videos shared online reportedly show a small circuit board hidden beneath the wallet’s screen. The suspected implant may have been capable of intercepting information displayed during the device’s initial setup, including the recovery seed phrase.
Reports also allege that the implant used a built-in cellular component to transmit the captured information to attackers. If a recovery phrase is exposed, criminals may be able to access and transfer funds from the associated wallet.
However, these details remain part of an ongoing investigation and should not be treated as a confirmed explanation for every reported loss.
Ledger Pauses CryptoBillis Sales
Ledger asked CryptoBillis to pause sales while the company investigates the affected devices. CryptoBillis has reportedly suspended sales of its hardware wallet inventory.
Ledger has advised customers who bought devices from the reseller within the past 90 days not to set them up if they have not already done so. Users who have already activated a potentially affected device should review Ledger’s official guidance and consider moving assets to a new signer with a newly generated recovery phrase.
Ledger Systems Not Reported as Compromised
There is currently no indication that Ledger’s own systems were breached or that devices purchased directly from Ledger were affected.
The incident appears to involve the supply chain and unauthorized modifications made before the devices reached customers. This is different from a direct compromise of Ledger’s servers or official software infrastructure.
Customers should purchase hardware wallets only through the manufacturer or an authorized distributor. Returned devices should also not be resold without proper security checks.
How Users Can Protect Their Crypto Wallets
Users should follow these basic security steps:
- Never use a device that arrives with a prewritten recovery phrase.
- Generate the recovery phrase during the device’s own setup process.
- Never share a recovery phrase or PIN with anyone.
- Do not trust people offering to recover stolen funds.
- Buy hardware wallets only from authorized sources.
- Follow security updates directly from the manufacturer’s official website.
A recovery phrase should be treated like the master key to a crypto wallet. Anyone who obtains it may be able to control the assets connected to that wallet.
Investigation Continues
Ledger has described the number of confirmed affected devices as limited and said the confirmed cases involve devices sold through CryptoBillis. The company continues to investigate the reported thefts and suspected hardware modifications.
Crypto users should avoid rushing to conclusions based on social media posts and should rely on official updates while the investigation continues.
Source: The Verge
Disclaimer: This article is for informational purposes only. BuzzToday24 does not provide cryptocurrency investment or cybersecurity advice.
