OneKey founder Yishi has published an analysis of the recent case in which tampered Ledger devices were suspected of being used in a theft totaling about $90 million. He said the attackers may have opened the devices and inserted a cellular module, allowing them to intercept mnemonic phrase data shown on the screen and bypass the secure element to steal funds. In response, OneKey said it will introduce five security improvements, including upgraded anti-counterfeit packaging, an initialization process that does not require displaying information on the screen, and encrypted internal motherboard bus communications at both the firmware and hardware levels. Hardware wallet maker Trezor also responded, saying it has fully suspended device sales through the e-commerce platform CryptoBilis involved in the case and is actively investigating. Trezor added that, so far, it has not received any reports of fund losses or device abnormalities similar to the Ledger incident.
OneKey founder Yishi has published an analysis of the recent incident in which suspected tampering of Ledger devices led to the theft of about $90 million in assets.
According to Yishi, the attackers may have privately opened the devices and implanted a cellular network module to intercept mnemonic phrase data displayed on the screen, then bypassed the secure element to carry out the theft.
OneKey announces five security upgrades
In response, OneKey said it will upgrade its anti-counterfeit packaging, introduce an initialization process that does not require screen display, and push ahead with five improvement measures including encryption for internal motherboard bus communications at the firmware and hardware levels.
Trezor halts sales on CryptoBilis
Hardware wallet maker Trezor also said it has fully suspended device sales through the e-commerce platform CryptoBilis involved in the case and is actively investigating.
Trezor said it has not, so far, received any reports of fund theft or device abnormalities similar to the Ledger case.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
