Ledger Wallets Drained in Supply Chain Attack
- Chainalysis linked three addresses to task scammers, resulting in losses of 60 BTC ($4.9 million).
- Thieves emptied three Ledger addresses via separate transfers to a single wallet.
- Ledger attributed the attack to a “highly organized criminal group” that tampered with hardware wallets.
- The attack involved moving stolen funds into three Ledger addresses on Sep. 22, which were drained by Oct. 9.
- Cryptobilis, the company selling affected Ledger wallets, was acquired by an undisclosed party earlier this year.
In a twist of events, scammers who had previously deceived individuals lost their funds when their compromised Ledger wallets were hacked as part of a supply chain attack. The incident highlights ongoing security challenges faced by crypto hardware wallet manufacturers and users.
Chainalysis identified the loss of $4.9 million in Bitcoin from task scammers’ wallets due to the Ledger breach, underscoring vulnerabilities in hardware wallet security systems.(Source)
