Hacking News
Ledger reports supply chain attack that drained $86 million from hardware wallets
Ledger announced that a sophisticated supply‑chain attack compromised its hardware wallets, allowing a criminal group to install implants that read users’ seed phrases. The group purchased devices, modified them and returned them to the market through resellers such as Malaysia‑based CryptoBilis, leading to losses reported in Southeast Asia. Blockchain investigator Specter estimated that about $86 million was drained from the tampered wallets. Ledger said the attack did not affect its chips, operating system or servers, and it has suspended sales by authorized resellers in Southeast Asia and Hong Kong while working with law enforcement.