- A hardware wallet is a dedicated device that stores the keys used to move cryptocurrency. Ledger confirmed that some devices sold through the Malaysia-based reseller CryptoBilis were tampered with by unauthorized hardware, and user assets were drained.
- Ledger said an unauthorized hardware device was found in the device of one affected user. The timing and method of the tampering are still unclear, and the company described the scale of the damage only as limited.
- Former Mt. Gox CEO Mark Karpelès claimed that a chip behind the device screen intercepts screen output and button input, and leaks the seed phrase (the word list used to recover a wallet) over LTE. Tibane Labs also said it confirmed this analysis. Both claims come from researcher announcements, and the source does not include independent verification results.
- Ledger warned that Genuine Check, its official authenticity verification feature, cannot find added devices when the device's original security chip is still in place.
O: fits a scene where someone looking to buy leisure equipment cheaply from secondhand or resale shops first checks the list of official sellers before buying.
X: The source says the leisure company disclosed the content and described the scope of damage only as limited, so the actual extent of damage and the perpetrator have not been confirmed.