TLDR Tech / News
Ledger Confirms 'Spy' Chip in CryptoBilis Devices Sent Keys via Mobile
Hardware wallet manufacturer Ledger has confirmed that a hidden microchip, installed in devices distributed by the Southeast Asian vendor CryptoBilis, captured users' 24-word recovery phrases from their screens and transmitted this data via an LTE mobile network. Ledger characterized the incident as a physical supply chain compromise that did not affect its software, internal infrastructure, or secure element. Onchain investigators estimate that over 300 wallets were compromised, resulting in losses exceeding $93.2 million.
Read the full story