Ledger hardware wallet supply chain attack: $86 million stolen!
Ledger official just issued a warning: investigating an asset theft incident involving Southeast Asian users, with devices purchased from dealers.
Official advice: If you bought a Ledger hardware wallet in the last 90 days, don't rush to use it.
How big is the loss?
On-chain investigator Specter estimates the stolen funds come from hundreds of wallets on Bitcoin $BTC, Ethereum $ETH, and the Tron network, totaling over $86 million. Security researcher tanuki42 previously estimated over $72 million, and the number is still rising.
Why can hardware wallets be compromised?
This is not a software vulnerability, but a physical supply chain attack.
Hardware security experts demonstrated a tampered hardware wallet: internally implanted with a miniature spy chip connected on the SPI bus between the secure element and the OLED screen.
How it works: passively intercepts the mnemonic phrase displayed on your screen, "reads" it using pattern recognition, then sends the mnemonic directly out via a built-in 4G module and eSIM. The entire process bypasses your computer and triggers no software alarms.
The security of hardware wallets has never been just about software. Any link from the factory to your hands can be tampered with.
Disclaimer: de content op OKX Orbit dient uitsluitend ter informatie. Meer informatie
