Hackers steal $80M by compromising Ledger wallet supply chain

by@cz_binance

Summary

Hackers have conducted a sophisticated scheme that resulted in the theft of over $80 million by infiltrating a hardware wallet distribution network. They acquired a reseller in Malaysia, which had been falsely listed as an official authorized reseller for years, and forced them to sign a non-disclosure agreement. Behind the scenes, the criminals inserted microscopic spy chips into every wallet, allowing them to silently capture users' private keys after the wallets were repackaged and shipped to unsuspecting victims. This incident underscores the ongoing vulnerability of hardware wallet distribution networks to unauthorized infiltration and highlights the importance of verifying wallet authenticity through official channels to prevent such pre-shipment tampering.

Tokens

$BTC

Analysis

Ledger: Ledger produces hardware cryptocurrency wallets designed to store private keys offline for enhanced security. The company maintains a global network of authorized resellers to distribute its devices to users. In this case, Ledger wallets were compromised through a tampered reseller channel that allowed insertion of spy chips to capture sensitive data. Pete Rizzo: Pete Rizzo is a cryptocurrency journalist and commentator focused on Bitcoin developments and security matters. He shared detailed reporting on this Ledger wallet supply chain compromise involving a Malaysian reseller and spy chip insertion. His coverage draws attention to risks in the hardware wallet distribution process. Supply Chain: Hardware wallet distribution networks remain susceptible to infiltration by unauthorized parties acquiring reseller entities. Security Practices: Users are advised to verify hardware wallet authenticity through official channels to mitigate risks of pre-shipment tampering.

Categories

crypto
View Original Tweet