Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Ledger巨额失窃案新线索：前Mt. Gox CEO警告或触发黑客行动
在与加密货币硬件钱包制造商Ledger相关的数百万美元盗窃案中，出现了一项引人注目的说法。有观点认为，前Mt. Gox首席执行官Mark Karpelès在大规模资产转移之前公开披露了存在漏洞的Ledger设备，这一举动可能促使攻击者加快了行动步伐。
改装设备暗藏玄机
10月8日，Mark Karpelès警告用户注意市场上销售的假冒或经过物理改装的Ledger设备，据称这些设备中隐藏有SIM卡。据报道，这些设备的屏幕下方隐藏着间谍软件，能够在钱包设置过程中拦截发送至屏幕的数据，并将用户的助记词传输给攻击者。
Karpelès表示，他检查的一台设备来自马来西亚，其外包装完好无损。尽管如此，据报道在该设备的屏幕下方发现了一处巧妙隐藏的间谍软件。
官方验证机制未能察觉
该事件最令人震惊的一点在于，这些经过修改的设备竟然通过了Ledger官方的“真伪校验”（Genuine Check）测试。这是因为攻击者在安装额外硬件时并未改动设备的原始安全芯片。虽然Ledger的验证系统可以检查安全芯片的真实性，但无法检测出对设备进行的所有物理改装。
蓄谋已久的同步盗刷
According to one theory, attackers collect users 'mnemonics over a long period of time through tampered devices. However, instead of carrying out the attack immediately, they waited for the opportunity while emptying a large number of wallets of assets.
It is speculated that after Karpelès issued a warning, which received approximately 90,000 views, the attacker may have realized that his activities had been exposed and took action. Following this scenario, after the operation was exposed, the attackers quickly began transferring assets from the wallets they controlled.
Supply chain attack rather than encryption vulnerability
Currently, a direct link between Karpelès claims and the subsequent massive wallet robbery has not been confirmed. In addition, it is unclear whether the spyware mentioned caused all attacks.
Preliminary investigation results indicate that this was a supply chain attack involving physical tampering with the device before it reached the user, rather than a vulnerability in the Ledger cryptographic security system.
