Ledger公司证实，通过其东南亚经销商CryptoBilis销售的硬件钱包中被植入了未授权芯片1。这一发现源于10月10日针对报告盗窃事件的调查1。区块链研究员Mark Karpelès在马来西亚获得的一台Ledger Nano X设备屏幕后发现了隐藏的电子元件，其中包含微控制器和蜂窝通信硬件1。
根据Bitquery的估计，约9290万美元的加密货币从311个钱包中被转移1，其中包括TRON网络上的7050万美元USDT和1680万美元比特币1。此外，约900个以太坊被转移到Tornado Cash混币服务1。Ledger方面表示"没有迹象表明Ledger的安全基础设施、系统或服务被破坏"1。CryptoBilis已暂停销售所有硬件钱包产品1。
Ledger建议受影响客户不要继续设置新设备，而应将资金转移到用全新恢复短语初始化的新硬件钱包1。约1000万美元USDT在与盗窃相关的地址中被冻结1。前CryptoBilis高管Arravind Prabu和Vimalatheethan称所有权变更和管理交接于3月完成1。
Ledger has acknowledged the discovery of an unauthorized hardware component embedded in cryptocurrency wallets sold through its Southeast Asian distributor CryptoBilis, following an investigation into a major theft incident reported on October 10. 1 Blockchain researcher Mark Karpelès uncovered electronic elements hidden behind the screen of a Ledger Nano X device purchased in Malaysia, including a microcontroller and cellular communication hardware. 1 The compromised devices were distributed across Indonesia, Malaysia, and the Philippines through the CryptoBilis channel. 1
The theft has resulted in substantial losses to users of the affected wallets. 1 Bitquery estimates approximately $92.9 million in cryptocurrency was transferred from 311 compromised wallets, including $70.5 million in USDT on TRON and $16.8 million in Bitcoin. 1 Additionally, around 900 ETH were moved to the Tornado Cash mixing service on October 10, and approximately $10 million in USDT has been frozen at addresses associated with the theft. 1
In response to the breach, Ledger stated it has found "no evidence that Ledger's security infrastructure, systems, or services have been compromised," and recommended affected customers avoid completing setup on compromised devices and instead transfer their cryptocurrency to new hardware wallets initialized with entirely new recovery phrases. 1 CryptoBilis has suspended sales of all hardware wallet products. 1
评论
还没有评论，欢迎留下第一条。