OneKey responds to Ledger supply chain attack incident and proposes five hardware wallet improvement measures
BIBIBI
AT A GLANCE
OneKey said it had not received any reports of related losses and announced plans to advance hardware wallet security improvements.
Article
⚡️OneKey analyzes Ledger hardware supply chain attack paths and proposes five improvement measures for hardware wallets
BlockBeats reports that October 10, regarding the incident in which Ledger devices sold through the CryptoBilis channel were suspected of having been tampered with, resulting in the theft of approximately 90000000 USD in assets, OneKey founder Yishi stated that, as of October 10, OneKey had not received any reports of related losses.
After conducting an in-depth analysis of the attack path involved in the Ledger hardware supply chain implant attack, OneKey announced five improvement measures, including upgrading anti-counterfeiting packaging, introducing an initialization process that does not require screen display, and advancing encryption for internal communication over the motherboard bus at both the firmware and hardware levels. Yishi hopes that manufacturers, researchers, and distribution partners can work together to carefully study how devices reach users and how sensitive data is transmitted within the devices.
Original link https://m.theblockbeats.info/flash/371149
Key points
01
BlockBeats reported that Ledger devices sold through the CryptoBilis channel were suspected of having been tampered with, resulting in the theft of approximately 90000000 USD in assets.
02
OneKey founder Yishi stated that, as of October 10, OneKey had not received any reports of related losses.
03
OneKey announced five improvement measures, including upgrading anti-counterfeiting packaging, introducing an initialization process that does not require screen display, and advancing encryption for internal communication over the motherboard bus.
04
Yishi hopes that manufacturers, researchers, and distribution partners will work together to study how devices reach users and how sensitive data is transmitted within the devices.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This report mainly covers two points: first, Ledger devices were suspected of supply chain tampering; second, OneKey announced five security improvement areas.
Why it matters to readers
The report concerns hardware wallet procurement chains, device initialization, and internal communication security.
When purchasing a hardware wallet, in addition to the device itself, attention should also be paid to packaging authentication, sales channels, and the device initialization process.
Risks and unknowns
Whether the Ledger devices were in fact tampered with has not been fully confirmed in the original report.
Approximately 90000000 USD The specific losses from the theft of the assets have still not been fully confirmed.
Of the five measures announced by OneKey, the original report listed only some directions; the specific plans and implementation status are unknown.
The original report did not provide the complete technical details of the relevant attack path.
Related Developments
Loading event timeline…
Related concepts
Hardware wallet
A wallet that uses a dedicated physical device to protect private keys and sign transactions.
