From The Verge · Terrence O'Brien · · 1m 10s
Ledger wallets hit by $86 million supply chain attack
A hardware implant hidden in Ledger crypto wallets sold through a reseller has stolen over $86 million from hundreds of users.
In brief
A hardware implant hidden in Ledger crypto wallets sold through a reseller has stolen over $86 million from hundreds of users. Ledger crypto wallets sold by reseller CryptoBillis contained hidden circuit boards that intercepted seed passphrases and stole over $86 million from hundreds of users, primarily in Southeast…
Hidden implant drains Ledger wallets
Users of Ledger crypto wallets have reported their accounts drained. Ledger confirmed one affected device contained an unauthorized hardware implant sold by reseller CryptoBillis.
How the implant steals crypto
Photos show a circuit board hidden under the wallet screen. The implant intercepts the seed passphrase displayed during setup and uses an embedded SIM card to send it to attackers.
Eighty six million dollars stolen
Reports indicate the hack has stolen over eighty six million dollars worth of crypto from hundreds of wallets, primarily affecting users in Southeast Asia who bought from CryptoBillis.
Ledger halts reseller sales
Ledger has asked CryptoBillis to pause all wallet sales while it investigates. Wallets purchased directly from Ledger appear unaffected. The company has provided guidance on checking for tampering.
The one thing
Ledger crypto wallets sold by reseller CryptoBillis contained hidden circuit boards that intercepted seed passphrases and stole over $86 million from hundreds of users, primarily in Southeast Asia.
