Skip to main content
Back to news
SafetyMajor story — Significance is rated automatically and is not a price signal.

Ledger Reports Hidden Chip in CryptoBilis Devices Transmitted Wallet Keys via Mobile Network

(10 hours ago) · 1 source · Summarized by CryptoBipto

Ledger has stated that hardware wallets sold by CryptoBilis contained a concealed chip that transmitted wallet private keys over a mobile network. The claim suggests that users of these devices may have had their cryptographic keys exposed to unauthorized parties. Details about the scope of affected devices and any resulting fund losses remain unclear.

WHY IT MATTERS

A hardware wallet is like a safe for your cryptocurrency keys — it is supposed to keep them completely offline so no one else can access them. Think of a private key as the master password to your funds: anyone who has it can move your crypto. In this case, Ledger claims that certain devices sold by CryptoBilis had a secret component hidden inside that could send those master passwords out over a cell phone-style network connection, without the owner knowing. This is a supply chain attack, meaning the tampering allegedly happened before the device reached the buyer. For beginners, this is a reminder that where and from whom you buy a hardware wallet matters, because a compromised device can defeat the entire purpose of using one.

According to Ledger, devices sold under the CryptoBilis brand contained a hidden chip — described by Ledger as a 'spy' chip — that was capable of sending wallet keys over a mobile data connection.

Read the full analysis with a CryptoBipto membership

Members can read the full analysis of every story, not just the headline.

Get started

SOURCES

  • coindesk.com

RELATED

Hardware WalletsSupply Chain SecurityPrivate Key SecurityLedger