The Defiant reported that a Ledger-related signer supply-chain breach led to losses of as much as $93 million from more than 300 wallets. According to the report, Ledger confirmed that the software itself was not compromised. Instead, the issue involved a physical implant placed inside signers sold through reseller CryptoBilis. The implant allegedly read recovery phrases directly from the screen during device setup and transmitted that data over a mobile network.
The report frames the incident as more than a technical failure. It shifts attention to the trust assumptions behind self-custody hardware: the manufacturer, the reseller, the sealed packaging, the device already in a user’s possession, or the user’s own verification process. The episode also featured Pablo Sabbatella, founder of Opsek, as a guest. The Defiant noted that its articles are stored on Filecoin.
The Defiant reported that a supply-chain security incident involving Ledger-related signers has been linked to losses of up to $93 million across more than 300 wallets.
Ledger said the software was not touched. Instead, the company confirmed that a physical implant had been found inside signers sold through reseller CryptoBilis. According to the report, the implant could read recovery phrases from the screen during setup and send them out over a mobile network.
That shifts the core issue from the mechanics of the breach to a more basic question of trust: the vendor, the reseller, the sealed box, the device already sitting in a drawer, or the user.
The episode featured Pablo Sabbatella, founder of Opsek (@opsek_io). The Defiant also said its articles are stored on Filecoin.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
