Ledger称发现未经授权硬件植入，损失或超8600万美元

Hardware wallet manufacturer Ledger finds unauthorized hardware implants in affected devices

Hardware wallet manufacturer Ledger said it has found evidence that at least one affected device purchased through Southeast Asian dealer CryptoBilis contained unauthorized hardware implants. The discovery comes as Ledger continues to investigate crypto-asset loss incidents related to specific equipment distributed through the dealer.

Ledger confirmed in an X (formerly Twitter) post posted on Sunday that the company was contacting affected customers and urged anyone with relevant information to participate in its reward program. The company also provides temporary guidance to customers who purchase Ledger hardware products through the dealer.

Key Points

• Ledger confirmed that a damaged device contained an unauthorized hardware implant.
• Ledger said its infrastructure and services were not compromised and the investigation is still ongoing.
• CryptoBilis has suspended sales of all hardware inventory involving Ledger until the investigation is completed.
• Ledger recommends that users avoid initializing devices that have not yet been set up; if they are, transfer funds to new devices generated using new mnemonic words.
• Ledger has not publicly confirmed the number of customers affected or the total value of losses.

Ledger reports unauthorized implants found on affected equipment

Ledger's confirmation was mainly based on reports of lost funds from users who purchased equipment from CryptoBilis. According to Ledger's X post on its support account, the company is proactively reaching out to users as part of its ongoing investigation.

Investigators Specter mentioned in Ledger's update estimated that losses on Bitcoin, Ethereum and Tron could exceed $86 million. However, Ledger did not identify the scope of the loss or the specific number of people affected.

To advance the investigation, Ledger invited individuals associated with the investigation to contact its reward program at bounty @ ledger. fr.

Preventive measures for CryptoBilis buyers

Ledger's instant customer guidance focuses on reducing the risk of further infringement.

For users who purchased Ledger devices from CryptoBilis but have not yet started setting up, Ledger recommends not starting the device setup process if they have not yet completed setting up.

For users who have already set up their Ledger device, Ledger recommends transferring the assets to a new Ledger signature device generated using new mnemonic words. The move aims to ensure that any exposure risks associated with damaged equipment no longer endanger the safety of funds.

Dealers suspend sales to cooperate with the investigation

In the same X update, CryptoBilis confirmed that it has stopped selling all hardware wallet inventory related to the period or batch involved in the case pending the results of the investigation. Ledger said the company is actively communicating with CryptoBilis about the next step.

Previous reports have pointed out that CryptoBilis has appeared on Ledger's authorized dealer lists in Indonesia, Malaysia and the Philippines. Ledger's update did not explain how the intrusion occurred or whether it was related to other specific links in the supply chain other than dealer inventory.

Ledger says its systems have not been compromised

Although Ledger is processing reports involving damaged equipment, it emphasizes that the broader ecosystem has not been targeted.

Ledger said in a statement provided to media that the incident appeared to be limited to individual dealers and their markets, adding that "Ledger's infrastructure, systems and services have not been compromised." The company reiterated that its investigation is still ongoing.

For customers seeking help, Ledger directs users to contact customer support through the official channel http://support.ledger.com

Readers should pay close attention to subsequent updates to Ledger and CryptoBilis to understand which devices are affected and what remedies will be provided. The key questions that remain open are how widespread the issue is and how exactly unauthorized hardware implants get into devices sold through dealers.