Kiwi News: handpicked crypto news for builders

here's how hackers steal your crypto from tampered Ledgers. they attach a small hardware implant to the wires connecting Ledger's secure chip to the OLED display. basically, anything displayed on the screen can also be read by the hidden chip. so when your 24-word seed phrase appears during setup, the implant captures it and stores it. then a built-in 4G modem and eSIM transmit that phrase to the attacker, completely independently of your computer. the craziest part is that the device can still pass Ledger's authenticity check because the original secure chip is genuine. and fun fact: some people even buy these fake Ledgers just to extract the eSIM and use it for free mobile data lmao

https://crypto.slopo.net

This looks like this could be exactly what I'm investigating. Anyone affected, please contact me or open your ledger and send me pictures so we can confirm if there's a bug in there (pictures: ledger board on top, spy implant below).

Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses. Reach out to Ledger customer support through official channels with any questions: https://support.ledger.com/

I’ve had a few people write to ask me to follow up on a (reply!) tweet I wrote that’s gotten a lot of retweets. I considered deleting it just to avoid the headache, but I think that would make people more paranoid. So let me share my thoughts.