Ledger confirms hardware implant in customer wallet as thefts top $93M
Ledger says an unauthorized implant was found in one affected user's device, while independent investigators estimate $93.2 million in suspected thefts.
Ledger has confirmed that an unauthorized hardware implant was discovered in the wallet of one affected customer, a finding the company says points to a gap in the authenticity checks used on its devices.
In a statement dated Oct. 10, the hardware wallet manufacturer said the discovery involved a device belonging to one of the affected users. The same statement also addressed CryptoBilis, an authorized reseller operating in Southeast Asia.
Independent estimate puts losses at $93.2 million
Independent investigators cited in the report estimate that suspected cryptocurrency thefts linked to the matter total about $93.2 million. Ledger's statement focused on the single confirmed device discovery.
Hardware wallets are designed so that private keys remain inside the device, which separates them from software-based exploits. Physical tampering or an implant introduced before a device reaches a buyer represents a different class of risk, one that runs through distributors and resellers rather than code.