🚨 OneKey Reproduces Exploit on Outdated Ledger App
The security team at OneKey, led by founder Yishi Wang, has successfully reproduced a "transaction replacement attack" targeting an older version of the Ledger Ethereum app (v1.22.1). This vulnerability allows an attacker to overwrite a transaction while the user is still reviewing the legitimate details on their hardware wallet screen.
Executing this exploit requires the attacker to gain control over the communication between the Ledger device and the host computer. This is typically achieved through malware, compromised wallet software, or malicious websites. The issue is specific to the transaction signing process and does not affect seed phrase security.
#Ledger #CryptoSecurity #Ethereum #OneKey
The security team at OneKey, led by founder Yishi Wang, has successfully reproduced a "transaction replacement attack" targeting an older version of the Ledger Ethereum app (v1.22.1). This vulnerability allows an attacker to overwrite a transaction while the user is still reviewing the legitimate details on their hardware wallet screen.
Executing this exploit requires the attacker to gain control over the communication between the Ledger device and the host computer. This is typically achieved through malware, compromised wallet software, or malicious websites. The issue is specific to the transaction signing process and does not affect seed phrase security.
#Ledger #CryptoSecurity #Ethereum #OneKey
🚨 Trezor Cuts Resellers Following Ledger Hardware Tampering Reports
Hardware wallet manufacturer Trezor has announced a significant reduction in its authorized reseller network. This preventative step follows confirmed reports of malicious hardware implants found in devices from its main competitor, Ledger.
The security breach involves devices sold by Southeast Asian reseller CryptoBilis. These compromised Ledger wallets contained implants that capture recovery phrases and transmit them over cellular networks. Blockchain investigators estimate potential user losses between $72 million and $86 million.
Trezor CCO Danny Sanders stated that while there is no evidence of Trezor devices being compromised, the company has halted shipments to certain resellers immediately. These entities will be officially removed from the authorized list on January 1.
#Trezor #Ledger #CryptoSecurity #HardwareWallet
Hardware wallet manufacturer Trezor has announced a significant reduction in its authorized reseller network. This preventative step follows confirmed reports of malicious hardware implants found in devices from its main competitor, Ledger.
The security breach involves devices sold by Southeast Asian reseller CryptoBilis. These compromised Ledger wallets contained implants that capture recovery phrases and transmit them over cellular networks. Blockchain investigators estimate potential user losses between $72 million and $86 million.
Trezor CCO Danny Sanders stated that while there is no evidence of Trezor devices being compromised, the company has halted shipments to certain resellers immediately. These entities will be officially removed from the authorized list on January 1.
#Trezor #Ledger #CryptoSecurity #HardwareWallet
🚨 Scammer Loses $4.8M in Bitcoin to Ledger Supply Chain Hack
Chainalysis has revealed that a mastermind behind a massive "task scam" became a victim of the recent Ledger hardware wallet breach. The individual lost 60 BTC, worth approximately $4.8 million, which they had originally stolen from victims through fake sales and review schemes.
The scammer moved the illicit Bitcoin into three separate Ledger addresses on September 22. On October 9, a different group of hackers emptied all three wallets in a single transfer. This irony highlights the severity of the security breach affecting Ledger users who purchased devices from specific resellers.
#Bitcoin #Ledger #CryptoHack #Chainalysis
Chainalysis has revealed that a mastermind behind a massive "task scam" became a victim of the recent Ledger hardware wallet breach. The individual lost 60 BTC, worth approximately $4.8 million, which they had originally stolen from victims through fake sales and review schemes.
The scammer moved the illicit Bitcoin into three separate Ledger addresses on September 22. On October 9, a different group of hackers emptied all three wallets in a single transfer. This irony highlights the severity of the security breach affecting Ledger users who purchased devices from specific resellers.
#Bitcoin #Ledger #CryptoHack #Chainalysis
🚨 Ledger Confirms Hardware Implants Used to Steal $102M
Ledger has confirmed that genuine hardware wallets were physically tampered with by attackers to steal user funds. The breach targeted devices sold through CryptoBilis, an authorized reseller operating in Malaysia, Indonesia, and the Philippines.
Attackers opened genuine devices and installed a hidden controller and an LTE chip with an embedded SIM card. This unauthorized hardware intercepted the 24 recovery words as they appeared on the screen during the initial setup and transmitted them directly to the hackers.
Blockchain analytics firm Bitquery estimates that $102 million has been stolen from 324 wallets across six networks. Because the original secure chip remained intact, Ledger’s "Genuine Check" software was unable to detect the physical modification inside the casing.
#Ledger #CryptoSecurity #HardwareWallet #CyberAttack
Ledger has confirmed that genuine hardware wallets were physically tampered with by attackers to steal user funds. The breach targeted devices sold through CryptoBilis, an authorized reseller operating in Malaysia, Indonesia, and the Philippines.
Attackers opened genuine devices and installed a hidden controller and an LTE chip with an embedded SIM card. This unauthorized hardware intercepted the 24 recovery words as they appeared on the screen during the initial setup and transmitted them directly to the hackers.
Blockchain analytics firm Bitquery estimates that $102 million has been stolen from 324 wallets across six networks. Because the original secure chip remained intact, Ledger’s "Genuine Check" software was unable to detect the physical modification inside the casing.
#Ledger #CryptoSecurity #HardwareWallet #CyberAttack