Ledger has been hacked

[PostQuantumBTC]

The amount of the cryptocurrencies lost is increasing, nobody know how the wallet was vulnerable but it is happening.

https://x.com/SpecterAnalyst/status/2108534068564373687
https://x.com/tanuki42_/status/2108527923766399243

They ignored the warning that Ledger is close source but they are affected now. There was someone that said he lost $100 million because of it.

https://www.reddit.com/r/ledgerwallet/comments/1x1fz09/my_ledger_wallet_just_got_drained_out_of_almost/

[The Founding Titan]

If this is real then we might really have a big problem on our hands as far as bitcoin/crypto is concerned because there is only so much people can take, it's good that bitcoin investors have learned to hold through storm but if that storm means you lose your bitcoin there is a chance that holders are going to start selling, after all you can't lose bitcoin if you don't own it after all.
Imagine a single individual potentially losing up to $100 million, gone in the blink of an eye, this is sad news indeed.

Edit: $100k

[Obim34]

They ignored the warning that Ledger is close source but they are affected now. There was someone that said he lost $100 million because of it.

What about Coldcard incident, was it also closed source?

The devs of these wallets should be checking for any vulnerabilities for the ones that haven't been attacked.

Nobody knows which is next on the attack, but it doesn't seem like Ledger itself was hacked, it may be individual vulnerabilities during the attack.

[BIT-BENDER]

If this is real then we might really have a big problem on our hands as far as bitcoin/crypto is concerned because there is only so much people can take, it's good that bitcoin investors have learned to hold through storm but if that storm means you lose your bitcoin there is a chance that holders are going to start selling, after all you can't lose bitcoin if you don't own it after all.
Imagine a single individual potentially losing up to $100 million, gone in the blink of an eye, this is sad news indeed.

Edit: $100k

If you can lose Bitcoin you can also lose money, all this news are making the rounds here because we are very interested in Bitcoin and Crypto-currency but honestly if Crypto-currency and the traditional financial system go head to head in terms of which has see more loses to scammers and hackers I believe the highest would be the traditional financial system.
Leaving Bitcoin isn't the safest option either but learning and growing security wise.

[PostQuantumBTC]

What about Coldcard incident, was it also closed source?

This is what I found out about Coldcard wallet on the forum and people have been warned some years ago before the vulnerability that got people money lost to hackers occurred few months ago:

Latest updates and changes to the list of open source hardware wallets:

- Coldcard hardware wallet removed because code is not Open Source anymore, but MIT+CC license and it can't be reproduced anymore.

I believe what good members on the forum are posting than the information that I am seeing online

[Majestic-milf]

What about Coldcard incident, was it also closed source?

The devs of these wallets should be checking for any vulnerabilities for the ones that haven't been attacked.

Nobody knows which is next on the attack, but it doesn't seem like Ledger itself was hacked, it may be individual vulnerabilities during the attack.

Nah true you yarn for here. If all these other devs use the past hacks take strengthen their own, I feel say most of these repeated incidences for no dey heard. Like this people sweat don go like that and e for even better say nah them spend am than another person just thief am like that. Nah things like this dey make people lose confidence in all these self custodial wallets.

[Princess Leah]

 When i saw the news earlier today, was like "another one" these hackers are not resting and they'll keep attacking wallets who's developers give them loopholes to penetrate, this is why people have been advised to switch to wallets that are air gapped and backed with a passphrase.



 I had to rush to their official handles to get more info about the hack then i came across that info in the image above. News like these shouldn't discourage anyone from using Bitcoin as a store of value, but rather get more enlightened about wallet security. Moreover, never buy a hardware if it's not directly from the company that owns it.
https://x.com/Ledger_Support/status/2108551100613714002

[MisFoxie]

If hardware wallet companies cannot communicate with all hardware wallets and they also do not have access to the seed phrase data then how are these hardware wallets getting compromised? People buy HW wallets so that their funds can stay as safe as possible, but given the current situation it seems like self seed generation is the most secure option.

It seems like the problem is only with the HW wallets that were shipped to some specific regions. Now the question is how will they catch the criminals who installed malware in the wallets? people will eventually stop using hardware wallets and the only reason will be the product's authenticity not for the actual value of the product.

[PremiumcryptoHub]

Currently there are many hacking incidents happening in the crypto world but what surprises us is that hardware wallets are getting hacked like Coldcard wallet was hacked and then sensitive information of users was leaked from Trezor and now it appears that ledger has been hacked. In fact we can see that many of those who purchased the device within the last 90 days from Southeast Asian reseller CryptoBilis and have already setup the device have their holdings transferred to the Bitcoin hackers.

The evidence is that a person bought 80 bitcoins four months ago when the price dropped to $65,000 but he bought ledger from this cryptoBilis reseller and deposited all his bitcoins into that wallet so the hackers had already taken all his bitcoins.

4 months ago, he bought 80 $BTC ($5.2M) at a low price of ~$65,000 and was sitting on a $1.38M profit. But a week ago, he bought a Ledger device from reseller CryptoBillis and deposited all 80 $BTC into it. Now he's lost everything.

https://x.com/lookonchain/status/2108585005635301427

[promise444c5]

Moreover, never buy a hardware if it's not directly from the company that owns it.
https://x.com/Ledger_Support/status/2108551100613714002

I posted on one of the existing thread on the forum that the reseller CryptoBillis is one of their authorized resellers    in the affected region..

Yes your advice is valid when it comes to crypto especially Bitcoin, but I guess some of this customers didn’t have any choice than to get it from this reseller since the official Ledger store directs its customers to the reseller.
For example, Apple or Samsung can’t directly shoot to your region so they direct you to an official reseller in your region or closer to you, that can get those products to you.

So the question is should people just assume that it’s only a single reseller? What if the compromised itself comes directly from Ledger [no one knows that yet but should they assume their wallet is safe ? No]

[Cryptomultiplier]

This post blew my mind because we experienced almost same issues with the recent coldcard incident and so many investors got scared and now Ledger?

Well, the total loss is estimated between $86- $90 million across nearly 100 wallet addresses and it is a cause occasioned by targeted supply chain from affected units bought from CryptoBilis.
These supply quantities from the supplier must have been tampered with as is the case and am sure other persons who bought their own Ledger wallet from other suppliers didn't get to experience such hack.

As a matter of precaution, it's adviced to purchase hardware wallets directly from the manufacturers, verify authenticity during setup, always generate fresh seed phrases and ensure what you got is using a closed source code because it can't for sure be tampered with.

[Gravitypull$]

So the question is should people just assume that it’s only a single reseller? What if the compromised itself comes directly from Ledger [no one knows that yet but should they assume their wallet is safe ? No]

Ledger has confirmed it themselves that it's only those that bought from their third party reseller in the South East Asia that is been affected currently, but people from other regions which also bought from CryptoBilis will be affected. Ledger isn't a good wallet with good security for a long time now based on what I have read so far and this isn't the first time that ledger users wallet have been compromised.

Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet.

https://x.com/i/status/2108551100613714002

[ColdLava40]

So the question is should people just assume that it’s only a single reseller? What if the compromised itself comes directly from Ledger [no one knows that yet but should they assume their wallet is safe ? No]

This is also something we should consider.

The original product comes directly from the company itself, I think they are just trying to push a cause out to the public and also try to maintain their reputation.

Ledger was never a good hardware wallet for me, though they still had a little reputation left but with this happening I doubt many users will still be interested in their products.

This years has been tough for both hardware and software wallet users, it only shows that no where is safe, just pray your coins don't get compromised.

[promise444c5]

Ledger has confirmed it themselves that it's only those that bought from their third party reseller in the South East Asia that is been affected currently, but people from other regions which also bought from CryptoBilis will be affected

Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet.

https://x.com/i/status/2108551100613714002

From their official post[the one you also posted], it reads:“ Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis” .

They  are still investigating and clearly have no idea where the attack is coming from other than compromised device.. Anyone who still holding their funds on ledger till now, is assuming they aren’t affected.

It’s better to be on the safer side than to rely on assumptions.. when everything is cleared, they can go back to using their Ledger if they want to  

[Obari]

The amount of the cryptocurrencies lost is increasing, nobody know how the wallet was vulnerable but it is happening.

https://x.com/SpecterAnalyst/status/2108534068564373687
https://x.com/tanuki42_/status/2108527923766399243

They ignored the warning that Ledger is close source but they are affected now. There was someone that said he lost $100 million because of it.

https://www.reddit.com/r/ledgerwallet/comments/1x1fz09/my_ledger_wallet_just_got_drained_out_of_almost/

Is this not the same story where claims that a third party seller compromised the wallets in his custody to exploit users that bought the wallet through him and I think I came across that story on the general board and I don't know if it's same story you're trying to talk about but below is the link to the post I'm trying to talk about https://bitcointalk.org/index.php?topic=5596385.msg67223998#msg6722399.

If it's same case then I think ledger are already acting on the news and so far they have placed the agent under investigation and instructed all those who bought from him within the last 90 days not to activate their wallets if they haven't and those who already did to move their coins to other wallets for now

Cases like this remind me of the importance of extra security especially the 2FA

[Livingleged]

This post blew my mind because we experienced almost same issues with the recent coldcard incident and so many investors got scared and now Ledger?

Well, the total loss is estimated between $86- $90 million across nearly 100 wallet addresses and it is a cause occasioned by targeted supply chain from affected units bought from CryptoBilis.
These supply quantities from the supplier must have been tampered with as is the case and am sure other persons who bought their own Ledger wallet from other suppliers didn't get to experience such hack.

As a matter of precaution, it's adviced to purchase hardware wallets directly from the manufacturers, verify authenticity during setup, always generate fresh seed phrases and ensure what you got is using a closed source code because it can't for sure be tampered with.

I don’t think it’s almost the same issue with that if COLDCARD, I think the COLDCARD has to do with firmware that was used in generating the seed. Also I think the coldcard also advised users prior to the attack to upgrade to latest versions of the firmware Wch was MK4/5, and those that upgraded were literally not affected.

This case is entirely different I don’t think it has to do with firmwares bugs im still doing my findings though.

[Ronsbit]

Is this not the case of cryptobills resell of the ledger hardware?
Ledger authorised cryptobills as a reseller of their hardware which is why vendor's buy from cryptobills and now the unfortunate has happened and a user lost good amount of assets via the ledger delivered by cryptobills. I wondered why ledger authorised a third-party sales of the hardware knowing fully well that it could be compromised at any point in time as long as a third party is involved.
Anyways the deed has been done and it is left for the to make amend of the mess already happened.

[PremiumcryptoHub]

The latest situation is that Ledger noted that an unauthorized hardware implant was found on the device of one of the affected users and we note that Ledger is contacting the affected users as part of the ongoing investigation and that Cryptobilis, the seller of the Ledger hardware wallet, will stop selling all of their hardware until this investigation is complete. Therefore I think the advice for those who have purchased laser hardware from this reseller but have not yet set up or configured it is to refrain from starting that process.



https://x.com/Ledger_Support/status/2108968264055345381

[gracreavix]

Let's educate ourselves now. Let's start with open source: this is a software that potentially allows everyone to see it's code and correct it if there is an issue with it.

For closed source: it is a software that hides it's code from the public. Thereby making it's users to trust them with addressing whatever issue it has in the code.

Neither of them are certain of complete security. There is still a likely hood of each or both to get hacked. So let's not shift blame to closed sources.

[Sonia_123]

Currently there are many hacking incidents happening in the crypto world but what surprises us is that hardware wallets are getting hacked like Coldcard wallet was hacked and then sensitive information of users was leaked from Trezor and now it appears that ledger has been hacked. In fact we can see that many of those who purchased the device within the last 90 days from Southeast Asian reseller CryptoBilis and have already setup the device have their holdings transferred to the Bitcoin hackers.

The evidence is that a person bought 80 bitcoins four months ago when the price dropped to $65,000 but he bought ledger from this cryptoBilis reseller and deposited all his bitcoins into that wallet so the hackers had already taken all his bitcoins.

4 months ago, he bought 80 $BTC ($5.2M) at a low price of ~$65,000 and was sitting on a $1.38M profit. But a week ago, he bought a Ledger device from reseller CryptoBillis and deposited all 80 $BTC into it. Now he's lost everything.

https://x.com/lookonchain/status/2108585005635301427

If this is what really happened, then they should go back to the where they bought the hardware from since they know that alot of bitcoiners put their trust on hardwares so much for the security of their coins, the hardware must have been tempered with or outdated, that is why it is advicible to buy your gadgets from a reliable source and be sure of what you have bought before usage .

Since the hackers are very smart and vigilant looking for Bitcoins everywhere one needs to be extra careful on how to store and secure your coins .