Home/Research library/Market research

Article / PANews

Ledger supply chain risks expand? Analyst discloses more than 20 resellers may pose potential risks.

PANews October 11 news: Crypto analyst Darkfost posted that after the exposure of a hardware wallet security incident related to Ledger reseller CryptoBilis, other resellers that may also involve risk emerged in community discussions, including some Lazada platform merchants.

Darkfost said that the full scope of the incident is still difficult to confirm. Although Ledger has confirmed that one affected user's device contained an unauthorized hardware implant and has confirmed that an investigation related to CryptoBilis is ongoing, it is still impossible to determine whether CryptoBilis is the only affected channel. Because some resellers are regionally connected, the possibility that their supply chains were also compromised at the same time cannot be ruled out. Therefore, he compiled a list of "potentially risky Ledger resellers," involving more than 20 suppliers, to remind users to pay attention to the security of devices purchased through the relevant channels.

However, Darkfost emphasized that the above judgment is currently based only on speculation about supply chain connections and is not a confirmed fact. Whether the relevant resellers are affected still requires further investigation. If users have purchased a Ledger hardware wallet from the relevant resellers in the past 6 months, they may consider migrating assets to a new secure device before the investigation results are clear. For users who wish to inspect their devices themselves, he said they can refer to the detection guide published by security researcher MagicalTux to learn how to identify whether a device shows signs of tampering.

Related reading