But as I noted in the Ledger story, Grand had initially found implants in four Ledger devices that were sold online by unauthorized Ledger merchants.

Report

Unverified

Points record evidence work. They are non-transferable, cannot be spent, and are not a payment.

Context

But as I noted in the Ledger story, Grand had initially found implants in four Ledger devices that were sold online by unauthorized Ledger merchants. These merchants appeared to be fly-by-night sellers who popped up in online marketplaces only to disappear after days or weeks. So the provenance of the compromised devices was already sketchy, as opposed to the later implants that were sold by reputable and authorized sellers.

Evidence so far

  • www.cryptobreaking.com
    Ledger says it has identified the method behind malicious implants found in some hardware wallets sold through reseller CryptoBilis. … Earlier coverage from Cointelegraph noted that losses were associated with Ledger devices sold through CryptoBilis, a reseller listed as authorized in Indonesia, Malaysia, and the Philippines.
  • www.gate.com
    Ledger's Donjon security team says wallets sold by CryptoBilis contained an unauthorized component that reads the screen and decodes the recovery phrase when it appears.
  • cointelegraph.com
    Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis

Submit evidence

Sign in to submit a quoted source. Two distinct Trusted principals must agree before corrections change the status.

View claim · View receipt · All bounties