hack or exploit

Ledger Makes Shocking Discovery in Crypto Theft Probe

3Importance
closedStatus
4News media
7Pieces
Published
Also mentions
BTCTRX

Ledger confirmed that at least one wallet tied to its CryptoBilis investigation contained an unauthorized hardware implant. The confirmation followed reports of a potential theft involving more than $80 million in crypto from its devices, and the device was described as part of a wider theft probe. The discovery keeps attention on the wallet supply chain and on what the investigation may find next.

Key claims & sources

✓
Ledger confirmed that an unauthorized hardware implant was found inside a crypto wallet linked to its ongoing theft investigation.
✓
The wallet with the implant was described as linked to Ledger’s ongoing theft investigation.
✓
Ledger confirmed over the weekend that at least one wallet tied to the CryptoBilis investigation contained an unauthorized hardware implant.
✓
Reports had emerged of a potential theft of more than $80 million in crypto from Ledger devices before the weekend confirmation.

What it means

Users and customers watching Ledger tomorrow morning will see that one wallet tied to the CryptoBilis probe was confirmed to contain an unauthorized hardware implant. That makes the device supply chain the immediate focus for anyone relying on those wallets, while the confirmation itself does not say how many other devices may be involved.

In practice, the confirmed finding changes the status of the case from a report of possible theft to a confirmed device-level compromise in at least one wallet. What stays the same is that the broader investigation is still ongoing, and the material does not say whether the issue was limited to a single wallet or extended beyond it. (per cryptopotato.com)

Market reaction i

Total crypto marketall crypto assets combined no single asset in the event: read against the whole market
first headline
-0.1% 2 h before
-0.5% 4 h after
$2.8Tmarket cap at publication
12data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 11 08:02
+9 h 16 m
Oct 11 17:18
The Defiant context
Its angle: unaffected, resellers, returned; with quotes
+9 h 19 m
Oct 11 17:21
Crypto Briefing context
Its angle: verification, highlights, stricter
+10 h 35 m
Oct 11 18:37
+10 h 36 m
Oct 11 18:38
The Defiant echo
No new facts: october, halted, asian; with quotes
+13 h 3 m
Oct 11 21:06
U.Today echo
No new facts: cryptocurrency, provided, reveals
+13 h 29 m
Oct 11 21:32

Thefts of a similar size

WhenWhat happenedFigure
5.2 years ago Liquid · Wallet stolen incident $91.3M
1.4 years ago Nobitex · Malware incident $90M
2.4 years ago BtcTurk · Hot wallet key compromised incident $90M
5.1 years ago Mirror · Improper access control incident $90M
3.0 years ago Heco Bridge · Hot Wallet Key Compromised incident $86.6M

4282 incidents stored · 81 were as large as this one or larger ($93M)