In both wallets, the attackers had replaced the microcontroller on the devices so that instead of generating random recovery seed phrases, the controllers generated one of a dozen or so pre-determined seed phrases the attackers had coded into the controllers, allowing them to guess the recovery seeds for the crypto accounts.
UnverifiedContext
In both wallets, the attackers had replaced the microcontroller on the devices so that instead of generating random recovery seed phrases, the controllers generated one of a dozen or so pre-determined seed phrases the attackers had coded into the controllers, allowing them to guess the recovery seeds for the crypto accounts.
Evidence
www.gate.com · context
The devices had been opened, resealed, and fitted with replaced internal components, and the recovery phrases they generated were predictable or predefined.
trezor.io · context
On affected devices, the recovery seed was created without using a hardware random number generator.
History
- · Unverified · initial