Little-Known Details Emerge About the High-Profile Ledger Hack – The Question “Why Now?” Is Answered

One of the most striking aspects of the incident is that the modified devices were able to pass Ledger’s official Genuine Check test. This is because the attackers were able to install additional hardware without altering the device’s original security chip. While Ledger’s verification system can check the authenticity of the security chip, it cannot detect all physical modifications made to the device.

According to one theory, the attackers had been collecting users’ recovery words for a long time through compromised devices. However, instead of carrying out the attack immediately, they waited to empty numerous wallets simultaneously.

It is speculated that after Karpelès’ warning, which garnered approximately 90,000 views, the attackers may have realized their activities had been exposed and taken action. According to this scenario, the attackers quickly began transferring assets from the wallets they had compromised after their operation was revealed.

However, a direct link between Karpelès’ statement and the subsequent large-scale wallet robberies has not yet been confirmed. It is also unknown whether the spyware in question was responsible for all the attacks.

Initial findings suggest a supply chain attack involving the physical alteration of devices before they reach users, rather than a vulnerability in Ledger’s cryptographic security system.

*This is not investment advice.