Ledger wallet implant exposes a gap in its authenticity check

Ledger has confirmed an unauthorized hardware implant in one affected customer's wallet as independent investigators estimate $93.2 million in suspected cryptocurrency thefts.In an Oct. 10 statement, the hardware wallet manufacturer said the discovery involved a device belonging to one of the affected users. It added that CryptoBilis, an authorized reseller operating in Southeast Asia, had suspended sales of all hardware wallet inventory pending the investigation's conclusion.The investigation began after customers reported losing cryptocurrency after buying Ledger devices from the reseller. Ledger has not said how many devices were modified or established that the implant caused all the reported losses.Ledger said it had found no indication that its security infrastructure, systems or services had been compromised.Why an implanted wallet can pass Ledger's Genuine CheckFormer Mt. Gox chief executive Mark Karpelès has been examining suspicious Ledger Nano X devices through Tibane Labs, which has documented three generations of Ledger Nano X implants designed to intercept recovery phrases. Its report combines Joe Grand's teardown of an earlier implant with two specimens Tibane examin...