Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP 硬件钱包安全警报震动加密货币社区：供应链攻击导致超9000万美元损失
一起针对硬件钱包的安全警报在XRP及加密货币社区引发强烈震动，引发了公众对于数百万用户如何保护其数字资产的广泛质疑。据东南亚地区的报道，近期Ledger（艾德格）硬件钱包设备遭到入侵，导致用户损失超过9000万美元。
供应链攻击锁定Ledger钱包
据报道，受影响的用户是通过CryptoBilis购买的设备，这是一家在马来西亚、印度尼西亚和菲律宾开展业务的区域经销商。调查表明，此次攻击涉及被篡改的钱包，恶意行为者已在设备到达买家手中之前掌握了种子短语（seed phrases）。Ledger已立即暂停通过CryptoBilis的所有销售活动，并正在调查事件源头。目前主流的理论认为，这是一起供应链泄露事件，使得攻击者在硬件钱包到达客户手中之前，便已成功分发了受损设备。
种子短语相当于数字钱包的主密钥。当设备携带预设的种子短语交付时，任何发送到该钱包的资产都可能被事先知晓该短语的人访问并盗取。
Regarding the risks of purchasing hardware wallets online, EasyA co-founder Dom Kwok emphasized that users must generate their own seed phrases during the setup process. He made it clear that if the wallet arrived with a pre-filled seed phrase, it means that the device has been compromised and should never be used to store digital assets.
How Users Protect Assets
Some XRP holders have expressed concerns about whether purchasing hardware wallets directly from the manufacturer's official website can ensure security. Community members clarified that regular devices will prompt users to generate a unique seed phrase during initial setup, ensuring that no one-including the manufacturer himself-can see the phrase.
This security breach refocuses on alternative wallet solutions designed to reduce similar risks. For example, Tangem provides hardware wallets in credit card format that use NFC technology to directly generate and store private keys on the card, effectively eliminating reliance on seed phrases. Xaman, a software wallet specifically designed for XRP Ledger, stores private keys on mobile devices and works with Tangem to provide NFC card options, adding an additional layer of hardware security.
Kwok recommends that users avoid using devices with preset credentials. On the contrary, after acquiring equipment through reliable channels, new seed phrases are generated during the setup process, which can provide a layer of defense against such threats.
The seed-phrase attack highlights the need for continued vigilance in the cryptographic security community. As attackers adopt increasingly sophisticated tactics, experts stress that investors must be extremely cautious about emerging attack vectors targeting hardware and software wallets.
New technical tools for risk management
In the face of changing market conditions and unpredictable risks, investors need to monitor portfolio and market data across multiple applications, which makes it difficult for them to respond quickly to threats. In an environment where a single Fed decision or unexpected altcoin listing can change the market landscape in seconds, tracking resources on fragmented platforms can cost traders money. As a result, many people are now turning to privacy-oriented solutions such as CryptoAppsy, which provides an integrated dashboard with real-time charts, actionable price alerts, currency-specific news and macroeconomic data without requiring users to create accounts.
Projects like CryptoAppsy aim to simplify the monitoring process, allowing users to make smarter decisions and respond quickly to sudden changes in the market by integrating advanced tracking and alert capabilities on a single screen.
While hardware wallets remain a core element of digital asset security, this incident shows that threats can even arise through the supply chain. Investors are urged to use only trusted sources, generate their own seed phrases, and consider tools designed to simplify management and market supervision.
