A troubling investigation has revealed that approximately $90 million in cryptocurrency losses can be traced back to compromised hardware wallets sold by the reseller CryptoBilis. This incident raises serious concerns about the security of hardware wallets and the potential risks faced by users, as the source reports that the integrity of the supply chain is now under scrutiny.
Подтверждение безопасности Ledger
Ledger, the manufacturer of the affected wallets, has confirmed that its systems were not breached. However, the company has issued a warning to customers who may have purchased these tampered devices, advising them to transition to newly generated recovery phrases to safeguard their assets.
Методы атаки на аппаратные кошельки
The investigation uncovered that attackers physically altered the hardware wallets before they were delivered to customers. This manipulation allowed the perpetrators to capture recovery phrases during the initial setup process, putting users' funds at significant risk.
Рекомендации для пользователей
Ledger has strongly recommended that customers refrain from initializing any affected devices and instead secure their cryptocurrency using trusted equipment.
In light of recent security concerns regarding compromised hardware wallets, it's important to note that Ledger's research team previously identified a critical vulnerability in MediaTek processors affecting Android smartphones. For more details, see this report.
