The Defiant reported that up to $93 million was drained from more than 300 wallets involving Ledger signing devices tampered before sale. The loss did not come from Ledger's software, the outlet said.
The affected devices were sold through reseller CryptoBilis and carried a physical implant that Ledger confirmed, according to The Defiant. The tampering read recovery phrases off the screen during setup and sent them off the device, the outlet reported.
Reported by the Custody & Infrastructure desk from The Defiant — Institutional. Published . Corrections