Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
XRP The attack on the Ledger supply chain has escalated: The scope of the attack has extended beyond Southeast Asia, affecting the European market.
Previously, attacks targeting Ledger’s hardware were believed to be limited to Southeast Asia. However, cryptocurrency commentator Fto (@ftosol) warned holders of XRP and the broader crypto community that similar compromised hardware was found in devices sold by the Malaysian distributor CryptoBilis. Now, this same malware has been detected among European retailers.
Devices equipped with hidden LTE-enabled spy chips are beginning to circulate across borders, indicating that the scale of the attack on the Ledger supply chain is much larger than initially reported. Fto warned that waiting for official confirmation from the US would be reckless, and urged holders to immediately transfer their assets to ensure their safety.
The scope of the attack has expanded: from Asia to Europe.
Fto said, “Ledger will never be able to recover from this incident. The entire supply chain was attacked. This is no longer an isolated event—it’s a widespread problem.” He emphasized that previous reports pointed to Asia, but now the same malicious software has been found among European retailers. If compromised devices have already begun to circulate across borders, the consequences could be disastrous.
The secrets behind the original attack have been revealed.
此次黑客攻击始于CryptoBilis，这是Ledger授权的服务于马来西亚、印度尼西亚和菲律宾地区的经销商。攻击者在设备到达买家之前，对Ledger Nano X设备进行了物理改装。他们在每个单元内部、屏幕下方安装了一块小型次级电路板。该电路板配备了一个LTE调制解调器和一张eSIM卡。
当用户设置设备时，24个助记词会显示在屏幕上。植入物会捕获这些单词，并通过移动数据连接将其传输出去。随后，攻击者利用窃取的助记词远程访问钱包。由于原始的加密芯片未被触动，Ledger自身的真实性检查通过了这些设备，只有额外添加的硬件是恶意的。
区块链情报公司Bitquery追踪了六个链上的损失情况：TRON、Bitcoin、Ethereum、BNB Chain、Polygon和Solana。目前从超过320个钱包中盗取的总金额已超过1亿美元。
供应链已受污染
Fto分享了一张打开的Ledger设备的图片，清晰地显示了本不应存在的次级电路板。他表示，供应链“不再孤立”，且受污染的设备“已经在跨境流通”。
社区反应
多位社区成员对此发表了看法。有人指出，由于原始安全芯片是真实的，该植入物可以通过Ledger的“正品检查”。他认为这是最可怕的部分，因为只有物理打开设备才能检测到它。
Another observer noted that Ledger operates a business worth billions of dollars, with marketing being a key aspect of its operations. This means that, due to the fact that this incident was overshadowed by Ledger’s extensive marketing efforts, its severity may not be recognized as seriously needed.
