Ledger Investigates Security Breach Affecting Cryptocurrency Wallets
Ledger SAS, a leading producer of cryptocurrency hardware wallets, is re-evaluating its sales policies and security protocols following reports of spyware that led to significant financial losses among users. The recent incident, described by the company, has resulted in an estimated loss of over US$90 million (approximately RM367 million) in stolen cryptocurrencies, prompting a comprehensive investigation into potential tampering and the integrity of their devices.
Official Response
Charles Guillemet, Ledger’s Chief Technology Officer, communicated via social media on October 13 that the company is currently assessing its anti-tampering measures. He urged users concerned about unlawful interface or modifications to refer to the company’s safety guidelines before attempting to inspect their wallets. Additionally, users are encouraged to send any potentially breached devices back to Ledger for thorough analysis.
In a separate announcement, Pascal Gauthier, the CEO of Ledger, elaborated on the issue, emphasizing that physical tampering poses a considerable threat to the entire cryptocurrency hardware sector. “We are reviewing the controls that apply to our direct sales and to resellers, and we will share what we can,” he stated.
Industry Impact
The alarming development has compelled other hardware wallet manufacturers to scrutinize their partnerships with third-party resellers. Companies like OneKey and Trezor have either suspended or are re-evaluating certain reseller agreements. Yishi Wang, CEO of OneKey, disclosed on social media that these changes could potentially lead to a substantial loss of revenue, estimated to be equivalent to an entire year’s earnings.
Details of the Incident
Reports of financial losses began circulating on October 9, with many users pointing to devices purchased from a Malaysian reseller, CryptoBilis. Blockchain analysis firm Galaxy Digital Inc. attributed over US$90 million in losses to this security incident, which affected numerous cryptocurrency wallets across various addresses. There are also claims of similar tampering involving Ledger products sold outside Malaysia, including devices from the German electronics retailer MediaMarkt.
In response to the situation, MediaMarktSaturn Retail Group has reportedly removed all Ledger merchandise from their stores and online platforms while seeking direct communication with the manufacturer to address the security issues.
Heightened Security Concerns
The rise in attacks targeting cryptocurrency-related technologies in recent months underscores a worrying trend for the industry. Hardware wallets, historically regarded as secure options for asset protection, are now facing increasing vulnerabilities, leading to calls for stricter controls and enhanced protective measures across the board.
As the investigation progresses, Ledger and other hardware wallet providers are under pressure to reinforce their security protocols to prevent future incidents and restore customer trust.
