Mt. Gox former CEO claims Ledger hardware wallets may be infected with spy modules

iconKuCoinFlash
Share
AI summary iconSummary
Former Mt. Gox CEO Mark Karpelès said a Ledger hardware wallet he received may contain a spy module. The device, sourced from Malaysia, showed no visible defects but included LTE components, an antenna, an eSIM, and a microcontroller connected to Ledger’s SPI bus. It could monitor displayed characters and transmit data after mnemonic setup, posing a risk of asset theft. Karpelès urged users to follow Ledger’s inspection procedures. Secure node setup and distributed ledger security remain essential for users managing private keys.

According to ME News, on October 10 (UTC+8), Mark Karpelès, former CEO of Mt. Gox, disclosed in a post that a Ledger hardware wallet he received appeared to have been implanted with a spy module. The device originated from Malaysia; its outer shrink-wrap packaging was intact, and anomalies were difficult to detect immediately upon opening—the implant was concealed in the location where the screen’s original cushioning should have been. Karpelès further explained that the module includes an LTE communication component, an antenna, an eSIM, and a microcontroller connected to the Ledger’s SPI bus, enabling it to analyze characters displayed to the user and transmit relevant data after the recovery phrase is set. Attackers could then monitor the victim’s wallet address and choose an opportune moment to transfer assets. He urged users to follow Ledger’s official guidelines to inspect their devices. (Source: BlockBeats)

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.