Topic
supply-chain attack
2 stories
Ledger Investigates Suspected $86M Drain Tied to Reseller's Tampered Devices
Ledger is investigating the loss of a suspected $86–87 million in customer funds after devices sold by a Southeast Asian reseller, CryptoBilis, were found to carry an implant that captured recovery phrases.
Ledger blames hidden 'spy chip' in CryptoBilis-sold wallets for recovery-phrase theft
Ledger says a covert chip hidden inside hardware wallets sold by reseller CryptoBilis read users' 24-word recovery phrases off the screen and beamed them to attackers over LTE; researchers estimate up to $93.2 million lost.