$86 Million Crypto Heist Linked to Ledger Signer Hardware Implant

What happened

Ledger signers sold via Southeast Asia reseller CryptoBilis were found to include an unauthorized hardware implant designed to intercept user data and send it to the attackers. The cryptocurrency theft was disclosed on October 9 and was immediately pinned on devices sold through CryptoBilis.

On October 13, Ledger confirmed that all confirmed fund losses linked to the incident involved a signer sold through CryptoBilis. A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.

The post $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant appeared first on SecurityWeek . Supply Chain Security $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.

Ledger provides users with a secure cryptocurrency wallet (the software or device that holds the keys to someone’s crypto) that is backed by a signer, an offline hardware device used to securely authorize blockchain transactions. Ledger asked the company to stop selling its devices and instructed customers to stop using them. It appears that someone along the distribution chain modified the signers to manually solder the hardware implant to the device’s circuit boards.

Key facts

• Ledger signers sold via Southeast Asia reseller CryptoBilis were — found: to include an unauthorized hardware implant designed to intercept user data and send it to the attackers
• Ledger — provides: users with a secure cryptocurrency wallet that is backed by a signer, an offline hardware device used to securely authorize blockchain transactions