CZ warns of supply chain attack risks with Ledger hardware wallets, suspects a single reseller of selling counterfeit or tampered devices.

BlockBeats news, October 9: CZ posted a reminder urging Ledger hardware wallet users to stay vigilant, especially those who recently purchased devices. Based on currently available information, this incident appears to be confined to the supply chain, involving one supplier, and a small number of users may have bought counterfeit or tampered Ledger devices.

CZ stated that Ledger is a long-established and highly secure hardware wallet brand in the industry, but such incidents can still occur. He anticipates and calls on the BNB ecosystem and the entire crypto industry to help track stolen funds and push for recovery.

Previously, Ledger confirmed it was investigating a theft incident involving users in Southeast Asia, who had purchased devices through the reseller CryptoBilis. Ledger has asked CryptoBilis to suspend sales and shipments, and advised users who bought devices through this reseller in the past 90 days not to initialize the devices for now; if setup has already been completed, they should create a new Ledger signing device with a new mnemonic phrase and transfer assets to a new wallet.

On-chain investigator Specter estimates that this incident has led to the theft of hundreds of wallets on the Bitcoin, Ethereum, and Tron networks, with losses exceeding $86 million. Security researcher tanuki42 previously estimated losses had exceeded $72 million and said the amount is still increasing. At present, the specific cause of the incident and whether the involved devices have security vulnerabilities remain to be confirmed by investigation.