TL;DR
Ledger crypto wallets have been compromised with backdoors, leading to the theft of approximately $102 million in cryptocurrency. The issue has expanded beyond Southeast Asia, with reports of similar implants found in wallets sold in Europe.
✦ Why It Matters
Ensure you purchase crypto wallets only from official sources to avoid compromised devices.
Key Takeaways
Full Summary
Ledger, a maker of hardware wallets for cryptocurrency, revealed that a backdoor in some of its devices allowed hackers to steal around $102 million from users. Initially discovered in Ledger Nano X wallets sold by an authorized reseller in Malaysia, the problem has since been reported in devices sold in Europe, suggesting a broader supply-chain compromise.
Users have also identified implants in newer Ledger models, including Ledger Flex and Ledger Stax. Notably, hardware hacker Joe Grand had previously found similar implants in Nano X wallets earlier this year, raising concerns about Ledger's response to such vulnerabilities.
The recent findings indicate that attackers are now targeting authorized resellers, exploiting customer trust to distribute compromised devices more widely. This evolution in tactics highlights a growing sophistication in the methods used to implant backdoors, making detection increasingly challenging.
Related