Ledger Says Organized Crime Group Spent Millions Targeting Hardware Wallet Users
Ledger reports a sophisticated supply chain attack, with a criminal group buying and tampering with devices before reselling them. $86 million in funds may have been drained.
Intelligence analysis by Qwen 2.5 (3B)
Hardware wallet manufacturer Ledger warns of a sophisticated attack where a criminal group tampered with devices and drained funds. The company is investigating and working with law enforcement.
A bad guy bought Ledger wallets, put a secret spy thing in them, and then sold them. Now they know people's secret passwords and can steal money. Ledger is looking into it and trying to stop the bad guys.
Analysis
{"
Supply Chain Attack Details":"Ledger reported a sophisticated attack where a criminal group bought Ledger devices, installed implants, and then resold them. The implants could read users' seedphrases.","
Financial Impact":"Blockchain investigator Specter estimated $86 million in funds were drained from tampered devices. Ledger stated no flaw was found in their hardware or systems.","
Investigation and Response":"Ledger sent employees to other markets to ensure no other supply chains were targeted. They also suspended authorized resellers and distributors in Southeast Asia and Hong Kong. The company is working with law enforcement to track the funds and dismantle the attackers' infrastructure."}
Key points
- Ledger reported a sophisticated supply chain attack
- A criminal group tampered with Ledger devices and drained funds
- No flaw was found in Ledger's hardware or systems
- Ledger is investigating and working with law enforcement
If the investigation is thorough and the bad guys are caught, the stolen funds might be recovered.
If the bad guys are not caught or the funds are irretrievably lost, it could set back the trust in hardware wallets.
