A Ledger supply-chain attack report stated that approximately 90000000 USD in crypto assets were stolen
BIBIBI
AT A GLANCE
A Ledger official distributor was hit by a supply-chain attack, with approximately 90000000 USD in crypto assets stolen.
Article
Security components intact, yet the recovery phrase was stolen: How the Ledger supply-chain attack precisely targeted users
A Ledger official distributor was hit by a supply-chain attack, reportedly resulting in approximately 90000000 USD in crypto assets being stolen. The victims had all handwritten and stored their recovery phrases, while the attackers implanted hardware modules to steal content displayed on the screen, extending the security boundary of cold storage from the chip to the logistics stage.
A Ledger official distributor was hit by a supply-chain attack.
02
Approximately 90000000 USD in crypto assets were stolen.
03
The victims had all handwritten and stored their recovery phrases.
04
The attackers implanted hardware modules to steal content displayed on the screen.
05
The report stated that the security boundary of cold storage extends from the chip to the logistics stage.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This content stated that the attack occurred at a Ledger official distributor. The attackers read the device screen content by implanting hardware modules; therefore, even if the security component remained intact, the information displayed on the screen could still be obtained.
Why it matters to readers
It indicates that the security risks of hardware wallets may not come only from the chip, but may also arise during distribution and logistics.
Using a hardware wallet does not mean that every stage is absolutely secure; the device's source and distribution process also warrant attention.
Risks and unknowns
The original text did not identify the official distributor.
Approximately 90000000 USD in losses, the scope of affected victims, and the attack details still require further verification.
The original text did not specify the affected device batches or remedial measures.
Related Developments
Loading event timeline…
Related concepts
supply-chain attack
This term is not in the glossary yet. Browse related concepts in the glossary.
