Ledger’s security team Donjon discovered an unauthorized hardware implant in wallets sold by reseller CryptoBilis in Southeast Asia. The implant reads the 24-word recovery phrase displayed during device setup and transmits it over LTE using a provisioned eSIM. Onchain investigator Specter traced more than $86 million in suspected thefts across Ethereum, Tron and Bitcoin. Ledger confirmed the implant on October 10th on one affected user’s device and CryptoBilis has stopped selling Ledger devices. The company advises affected users to move their assets to a new device with a new recovery phrase.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
