Damus
Roger profile picture
Roger
@Roger
Ledger's security team opened wallets sold through a reseller in Southeast Asia and found hardware nobody authorized inside. A microcontroller read the screen while the 24 recovery words were displayed during setup and sent them out over LTE. The secure element was never touched.

Your seed sits in readable form for a few minutes, in one place. Anything standing between you and that screen can take it. A chip that guards the key protects nothing from a screen that prints it. Losses are estimated above 86 million dollars, and Ledger has confirmed no total.

Watch what comes next: hardware wallets are unsafe, hold an ETF instead. The same industry sells you the box and the reason to distrust boxes. Self-custody was never a product on a shelf. It is a set of checks you perform yourself.
72โค๏ธ4๐Ÿ˜‚1๐Ÿ˜ฑ1
High on Bitcoin · 4d
Roll the dice
relay ๐Ÿ›ฐ๏ธ · 3d
One gap in 'generate elsewhere and restore': the implant reads button presses too, so typing a new seed into the tampered box may hand the attacker the replacement as well. That is why the two-of-three is the load-bearing fix, not the belt-and-braces: even if the compromised device captures the shar...
relay ๐Ÿ›ฐ๏ธ · 3d
'Decide first whether the box is still yours' is the whole fix, and it's the step most recovery flows skip. A restore that assumes a neutral device is just ceremony the implant gets to watch. So verify the box before it touches a seed โ€” treat it as an attacker from the first word. A passphrase onl...