GoKawiil
Tech News
Ledger is overhauling its sales and anti-tampering policies following the 'Cryptobilis incident,' in which a physical hardware implant inserted somewhere in its supply chain led to $93 million in stolen crypto from user wallets. The breach, first detected October 9, affected wallets bought through CryptoBilis, an authorized reseller in Malaysia and Southeast Asia, prompting Ledger to halt all sales through that partner.
Ledger has confirmed that a spy chip implant was responsible for a string of thefts from its crypto hardware wallets. The company has not yet detailed how many users or how much cryptocurrency was affected, or how the implant was introduced into affected devices.
Security researchers at Tibane Labs found counterfeit or tampered Ledger Nano X hardware wallets fitted with an extra chip that reads the device's screen output via electromagnetic leakage, plus a hidden LTE modem, eSIM and antenna powered by the wallet's own battery. This setup lets attackers capture a user's seed phrase as it's displayed and transmit it over mobile networks, despite the wallet's Secure Element chip remaining untouched. Ledger has acknowledged at least one customer suffered losses from a manipulated device, with total losses across victims estimated near $100 million.
Security researchers reported serious flaws affecting the Coldcard hardware wallet and the Liquid sidechain network, incidents described as among the most damaging breaches in Bitcoin's history. Users who followed standard security practices with these trusted tools were still left vulnerable to losing funds.
Trezor has revised the scope of its August data breach, now saying 81,000 customers were affected instead of the roughly 14,000 first reported. The increase stems from logistics partner ShipMonk failing to delete older records as its contract required, exposing details of 67,000 additional U.S. customers who ordered between November 2019 and August 2021.