CZ said the Ledger user theft incident was suspected to be a single-distributor supply chain attack
BIBIBI
AT A GLANCE
CZ said the Ledger user fund theft incident appears to involve one distributor, and that a small number of users may have purchased counterfeit or tampered devices.
Article
CZ Ledger user theft incident suspected to be a single-distributor supply chain attack
PANews October 9 reported that CZ posted on X to remind Ledger hardware wallet users to be alert to risks, especially those who purchased devices recently. He said that, based on the information currently available, the incident appears to be a localized supply chain attack involving only one distributor, and that a small number of users may have purchased counterfeit or tampered Ledger devices. He expects the BNB ecosystem and the industry as a whole to help trace and recover the funds. Ledger previously said it was investigating an incident involving user funds stolen in connection with Southeast Asian distributor CryptoBillis.
PANews reported that CZ posted on X to remind Ledger hardware wallet users to be alert to risks, especially those who purchased devices recently.
02
CZ said that, based on the information currently available, the incident appears to be a localized supply chain attack involving only one distributor.
03
CZ said that a small number of users may have purchased counterfeit or tampered Ledger devices.
04
CZ expects the BNB ecosystem and the industry as a whole to help trace and recover the funds.
05
Ledger previously said it was investigating an incident involving user funds stolen in connection with Southeast Asian distributor CryptoBillis.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The risk described in this report is not a confirmed widespread product issue, but rather a suspicion that counterfeit or tampered devices may have entered the distribution process at one distributor. The relevant claims remain under investigation.
Why it matters to readers
The incident involves the fund security of hardware wallet users; if the devices were indeed counterfeited or tampered with during distribution, users who recently purchased devices through related channels may face risks.
Users who recently purchased Ledger devices should pay attention to the devices' source and the results of Ledger's follow-up investigation, but the original text does not provide specific methods for identifying problematic devices.
Risks and unknowns
It has not yet been confirmed whether the incident was in fact a supply chain attack.
It has not yet been confirmed whether the devices were counterfeited or tampered with, and the specific attack method has not been disclosed.
The original text does not disclose the number of affected users or the scale of the financial losses.
There are no results of fund recovery yet.
Ledger's final investigation conclusions regarding the CryptoBillis-related incident have not yet been announced.
Related Developments
Loading event timeline…
Related concepts
Hardware wallet
A wallet that uses a dedicated physical device to protect private keys and sign transactions.
