Hardware wallet manufacturer Ledger, having looked into complaints of digital asset theft tied to units bought through a Southeast Asian vendor, has verified that one victim’s hardware featured a rogue physical modification.
Ledger stated in a Sunday post on X that it was contacting customers as part of its ongoing probe into the theft, which security investigator Specter estimated could surpass $86 million in Bitcoin, Ethereum, and Tron holdings.
Ledger requested that anyone possessing details regarding the inquiry get in touch with its bug bounty initiative at bounty@ledger.fr.
As a preventative step, the vendor CryptoBilis announced in the same post that it had paused all hardware wallet inventory transactions until the inquiry wraps up. Ledger is in direct dialogue with CryptoBilis concerning the following steps.
Related: Ledger investigates fund losses linked to Southeast Asian reseller, warns users
Ledger advises clients who acquired a unit from this merchant to refrain from beginning configuration if they haven’t already done so. Should they have already initialized their Ledger hardware, they ought to think about transferring funds to a brand-new Ledger signing device utilizing a fresh recovery phrase.
Cointelegraph reported on Friday that CryptoBilis was registered as an official Ledger distributor across Indonesia, Malaysia, and the Philippines.
Ledger has not verified the exact number of impacted clients or the financial magnitude of the stated thefts.
In a declaration provided to Cointelegraph, Ledger mentioned that the event seemed restricted to that particular merchant and its regional footprint.
“Ledger’s infrastructure, systems and services were not compromised,” the firm noted, noting further that its inquiry is still active.
For help or inquiries, reach out to Ledger client assistance via official pathways at http://support.ledger.com.
Magazine: France is world’s most dangerous place for Bitcoiners: 90 attacks in 7 months
Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.
Originally published at https://cointelegraph.com/news/ledger-confirms-unauthorized-hardware-implant-losses-may-exceed-86m?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.
