Current outcome
The Ledger hardware-wallet loss incident is now confirmed to involve the supply chain: devices sold through an authorized reseller contained unauthorized implants that could capture and exfiltrate recovery phrases, intensifying scrutiny of hardware-wallet supply-chain and self-custody security guarantees.
Progress timeline
2 material updates- #01
Crypto Hardware Wallets Hit in Estimated $70 Million Attack
Ledger reported that cryptocurrency hardware wallets were drained in an attack estimated at $70 million, raising concerns about the security guarantees of self-custody devices.
Source evidence: Bloomberg.com
- #02
Can crypto users trust the supply chain behind hardware wallets?
Ledger confirmed that one affected device sold through authorized reseller CryptoBilis contained an unauthorized implant; the malicious implants captured users’ recovery phrases and transmitted them over cellular networks. Trezor also announced it would reduce resellers as a preventive step.
State after update: The Ledger hardware-wallet loss incident is now confirmed to involve the supply chain: devices sold through an authorized reseller contained unauthorized implants that could capture and exfiltrate recovery phrases, intensifying scrutiny of hardware-wallet supply-chain and self-custody security guarantees.
Source evidence: Cointelegraph