Ledger Received Tampering Reports Months Before Security Incident, Critics Say Response Fell Short
Summary
- French hardware wallet maker Ledger reportedly received device tampering complaints months before a security incident but failed to take sufficient action.
- Former Mt. Gox CEO Mark Karpeles and security researcher Joe Grand said they had reported device tampering involving malicious components in devices including the Ledger Nano X since last year.
- Digital asset losses were reported from wallets sold by Southeast Asian distributor Cryptovilis, and Ledger acknowledged unauthorized components in some devices, underscoring the need for investor caution.
Forecast Trend Report by Period
French hardware wallet maker Ledger is facing claims that it failed to take adequate action despite receiving reports of device tampering months before a recent security incident.
Cointelegraph reported on October 16 that former Mt. Gox Chief Executive Officer Mark Karpeles said he knows at least two people who reported device tampering to Ledger starting in December last year. He added that he has not confirmed any public warning issued by the company in response.
Security researcher Joe Grand also reported device tampering to Ledger in March. He said he found a malicious component in a Ledger Nano X purchased in August last year through Lazada, an online shopping platform in Thailand. Ledger responded that it had received the report and opened an internal investigation, but it did not issue a separate warning to customers, Grand said.
The issue drew broader attention after digital asset losses were reported on October 9 from wallets sold through Cryptovilis, a Southeast Asian distributor of Ledger wallets. Ledger acknowledged that one of the affected devices contained an unauthorized component.
Karpeles said Ledger should at least have warned customers to be cautious as reports of device tampering increased and the methods became more sophisticated.
Uk Jin
wook9629@bloomingbit.ioH3LLO, World! I am Uk Jin.