Cc9f267dcClaimOn October 9, 2026, Ledger began investigating hardware wallet thefts linked to devices sold by Southeast Asian reseller CryptoBilisAgreeDisagree
Cc9f267dcClaimLedger's October 13, 2026 update confirmed over $102 million was stolen across 324 cryptocurrency wallets compromised by tampered devicesAgreeDisagree
Cc9f267dcClaimLedger confirmed a hardware implant was discovered inside at least one Ledger device sold by reseller CryptoBilisAgreeDisagree
Cc9f267dcClaimA tampered Ledger device intercepted the 24-word recovery seed phrase displayed on screen and transmitted the data using a radio frequency transmitterAgreeDisagree
Cc9f267dcClaimThe XRP ecosystem awarded a $250,000 bug bounty payout for the responsible disclosure of the XRP infinite mint vulnerabilityAgreeDisagree
Cc9f267dcClaimAn OpenAI employee planted a homemade audio recording device behind a television in an executive boardroom at OpenAI's officeAgreeDisagree
Cc9f267dcClaimMass-market consumer smartphones like Apple iPhones provide supply chain security benefits for cryptocurrency storage due to high production volumes compared to dedicated hardware walletsAgreeDisagree
Cc9f267dcClaimBetween $70 million and $100 million was stolen via tampered Ledger hardware wallets distributed through reseller channels over a four-to-five-month periodAgreeDisagree
Cc9f267dcClaimAttackers compromised genuine Ledger hardware wallets by soldering an LTE chip, a CPU module, and an eSIM onto the legitimate device boardAgreeDisagree
Cc9f267dcClaimA vulnerability allowing an infinite minting bug existed undetected in the XRP codebase for a decadeAgreeDisagree
Cc9f267dcClaimTampered Ledger devices in early supply chain attacks were pre-initialized with a 24-word recovery phrase printed on paper or a scratch cardAgreeDisagree
Cc9f267dcClaimA security research team spent $40,000 on compute resources over six days to discover a remote code execution vulnerability in Google ChromeAgreeDisagree
Cc9f267dcClaimA hardware implant inside compromised Ledger devices intercepted seed phrase data sent from the secure element to the screen displayAgreeDisagree
Cc9f267dcClaimGoogle's maximum bug bounty payout for critical vulnerabilities, including remote code execution bugs in Chrome, is $250,000AgreeDisagree
Cc9f267dcClaimA hardware implant inside compromised Ledger devices transmitted intercepted seed phrases to an external command-and-control server via cellular LTEAgreeDisagree
Cc9f267dcClaimTampered Ledger devices bypassed the Ledger genuine check because an implant intercepted display data without modifying the genuine CPU, secure element, or firmwareAgreeDisagree
Cc9f267dcClaimPaper wallets prevent online transaction signing while providing cold storage for cryptocurrency private keysAgreeDisagree
Cc9f267dcClaimThe Ledger genuine check verifies whether the device's CPU, secure element, or firmware have been modified or replacedAgreeDisagree
Cc9f267dcClaimThe individual who bugged OpenAI's executive boardroom wrapped the implanted recording device in toilet paperAgreeDisagree
Cc9f267dcClaimHardware wallets limit cryptocurrency attack vectors by isolating private key generation from general-purpose computer operating systemsAgreeDisagree
