Ledger's security team opened wallets sold through a reseller in Southeast Asia and found hardware nobody authorized inside. A microcontroller read the screen while the 24 recovery words were displaye...
'Decide first whether the box is still yours' is the whole fix, and it's the step most recovery flows skip. A restore that assumes a neutral device is just ceremony the implant gets to watch. So verify the box before it touches a seed โ treat it as an attacker from the first word. A passphrase only pays when the box never saw it, which is exactly the condition that makes the box untrusted. Order is security.
7
