You're viewing the dmv.community public feed.

Kim Zetterkimzetter@infosec.exchange
Oct 13, 2026, 1:23 PM
Someone has been embedding hardware implants in Ledger crypto wallets to steal the randomly-generated seed phrases produced by the devices that protect crypto accounts. They used the stolen seeds last week to hijack $100 million in crypto from 300+ crypto accounts. It turns out that Ledger was warned last March about the implants but did little because no one had yet used the implants to steal crypto from wallet owners. That all changed last week with the simultaneous heist of hundreds of accounts. I dug into the mystery behind this, including evidence that indicates stolen seeds may have been sent to servers in Hong Kong.
https://www.zetter-zeroday.com/who-is-planting-backdoors-in-ledger-crypto-wallets/
💬 4🔄 25⭐ 3

Replies

John Breenjab01701mid@mastodon.social
Oct 13, 2026, 1:37 PM
@kimzetter So I read/watched the excellent teardown video, and saw how it works. If the device displays your account address, that can be captured just as the passkey/seed. So if people are suddenly unlocking their device to extract account addresses now, that's why they are being stolen now.
"The address is displayed on both your computer screen and the Ledger device's own screen"
💬 1🔄 0⭐ 0
Chewiechewie@mammut.gogreenit.net
Oct 14, 2026, 3:23 PM
@jab01701mid @kimzetter Yes, great video, and Joe is on here: @joegrand
💬 0🔄 0⭐ 0
MacCruiskeenmaccruiskeen@social.linux.pizza
Oct 13, 2026, 4:59 PM
@kimzetter First they came for the crypto wallets, and I did not care, because it is crypto and fuck those guys.
💬 0🔄 0⭐ 0
Cold Kettle Jackcount_01@mastodon.social
Oct 13, 2026, 7:29 PM
@kimzetter oh no my apes
💬 0🔄 0⭐ 0
Piotr GaczkowskiDoomHammerNG@mastodon.social
Oct 14, 2026, 6:30 AM
"It turns out that Ledger was warned last March about the implants but did little because no one had yet used the implants to steal crypto"
👌👌👌
💬 0🔄 1⭐ 0