Scammer Loses $4.8M in Ledger Supply Chain Attack
- Ledger suspended its reseller network in South East Asia after over $103.4 million was stolen from more than 530 addresses.
- A scammer lost 60 Bitcoin, valued at approximately $4.8 million, due to tampered Ledgers containing spyware.
- The scammer previously operated a “task scam” that involved fake sales and reviews, potentially misleading their own victims.
- Ledger confirmed that all thefts reported so far are from Asia, despite some tampered Ledgers appearing in Europe.
- Trezor announced plans to close certain resellers by January due to security concerns but has no reports of tampered devices.
This incident highlights vulnerabilities in hardware wallet supply chains and the irony of a scammer falling victim to their own tactics. Ledger is taking steps to enhance device security while addressing the fallout from this significant theft.
The loss of $4.8 million by the scammer underscores the complexities and risks associated with cryptocurrency security measures today.(Source)
