hack or exploit

Ledger users warned of potential implant in Malaysian devices

0Importance
closedStatus
2News media
2Pieces
Published
In
Wallets and custody

Ledger users were warned about a possible implant in devices linked to Malaysia, and a security analyst described a possible path that could let a device read screen data and send seed phrases over LTE or an eSIM. The attack path has not been independently confirmed, and the reports leave open what was actually installed and on how many devices.

Share on X Share on Telegram Share on Reddit Share on WhatsApp

Key claims & sources

✓
Ledger users were warned about a potential implant in Malaysian devices.
Ledger users warned of potential implant in Malaysian devices
✓
The incident was described as highlighting the need for secure supply chains in tech.
Ledger users warned of potential implant in Malaysian devices
✓
A security analyst described a suspected implant as potentially able to read screen data and transmit seed phrases through LTE or an eSIM.
Security Analyst Describes Potential Seed-Phrase Theft Path in Ledger Device
✓
The attack path has not been independently confirmed.
Security Analyst Describes Potential Seed-Phrase Theft Path in Ledger Device

What it means

What changes in practice is that the devices are now discussed as potentially having a hidden component that could interact with the screen and network functions, rather than just being ordinary hardware. What stays the same is that the described path remains only a description of what a suspected implant could do, and the account says it has not been independently confirmed. (per tokenpost.com)

Market reaction i

Total crypto marketall crypto assets combined no single asset in the event: read against the whole market
first headline
-0.2% 2 h before
-0.3% 4 h after
$2.8Tmarket cap at publication
12data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 9 16:52
Crypto Briefing scoop
Breaks the event
+1 d 20 h
Oct 11 13:15
Crypto News Flash context
Its angle: cryptocurrency, cybercriminals, cryptographic

Other recent incidents

WhenWhat happenedFigure
2 days ago FLOKI Trading Bot incident no figure in dollars
2 days ago TENDRIL · Swap Logic Flaw incident $550k
2 days ago $TENDRIL · Smart contract vulnerability incident $555k
4 days ago InsurancePool/CoreVault · Flash loan attack incident $112.3k
5 days ago Solana MEV Bot King · Hot wallet key compromise incident $856k

4282 incidents stored