Ledger调查东南亚经销商植入硬件致资金损失事件
Ledger Investigates Fund Losses Tied to Southeast Asian Reseller After Implant Found in Device
直接关联加密资产安全与持有风险，影响面大。建议所有硬件钱包用户核查购买渠道，警惕非授权经销商的改装设备风险。
Bitcoin Magazine
比特币杂志
Ledger Investigates Fund Losses Tied to Southeast Asian Reseller After Implant Found in Device
Ledger 调查与东南亚经销商相关的资金损失，发现设备中存在植入物
Ledger has said it is working with authorities after users last week reported losing funds and one received a tampered device. But the company reassured customers that the number of impacted products was “limited.”
上周有用户报告资金丢失且一人收到被篡改的设备后，Ledger 表示正与当局合作。但该公司向客户保证，受影响的产品数量“有限”。
The hardware wallet manufacturer added in an announcement on Sunday that it had reached out to affected customers.
这家硬件钱包制造商在周日的公告中补充称，它已联系受影响的客户。
Paris-based Ledger on Friday said it had started an investigation after customers in South East Asia reported they’d lost funds after buying from a reseller.
总部位于巴黎的 Ledger 周五表示，在东南亚客户报告从经销商处购买后资金丢失后，公司已启动调查。
Then, on Saturday, Ledger said it confirmed that one of the impacted users’ devices contained an unauthorized hardware implant.
随后，周六 Ledger 表示，它确认一名受影响用户的设备中包含未经授权的硬件植入物。
Ledger would not confirm the amount of money lost but blockchain investigator Specter said $86 million had been drained from devices.
Ledger 未确认损失金额，但区块链调查员 Specter 称，从设备中盗取了 8600 万美元。
“As the investigation continues, we are working with relevant authorities,” Ledger wrote on Sunday.
“随着调查的继续，我们正在与相关当局合作，”Ledger 周日写道。
It added: “Also, we strongly advise users not to purchase from unauthorized resellers, where the risk of buying suspicious, counterfeit or modified devices is important as nothing operates under ledger security guidelines.
它还补充道：“此外，我们强烈建议用户不要从不授权经销商处购买，因为在那里购买可疑、假冒或改装设备的风险很高，因为这些产品均未遵循 Ledger 的安全指南。”
“Security isn’t static and this incident underscores why we continuously review and strengthen our distribution and anti-tamper processes.”
“安全并非静态，此次事件凸显了我们为何要不断审查和加强分销及防篡改流程。”
Customers in South East Asia last week reported losing funds after buying from Kuala Lumpur, Malaysia-based vendor CryptoBilis.
上周，东南亚客户报告称，从位于马来西亚吉隆坡的供应商 CryptoBilis 购买后丢失了资金。
Ledger then advised customers who’d bought from CryptoBilis to not set up their devices.
随后，Ledger 建议从 CryptoBilis 购买的客户不要设置他们的设备。
CryptoBilis has since stopped selling its hardware wallets, Ledger said on Sunday.
Ledger 周日表示，CryptoBilis 此后已停止销售其硬件钱包。
People on social media posted picture evidence of devices implanted into Ledger products, claiming it could get users’ private keys. It isn’t clear how many of Ledger’s signing devices contained the implant.
社交媒体上有人发布了设备被植入 Ledger 产品的图片证据，声称这可能获取用户的私钥。目前尚不清楚有多少 Ledger 签名设备包含该植入物。
Neither Ledger nor CryptoBilis immediately responded to questions from Bitcoin Magazine.
Ledger 和 CryptoBilis 均未立即回应比特币杂志的提问。
Hardware wallet security has been a hot topic ever since hackers in July were able to steal close to $120 million in bitcoin from Coldcard users.
自七月黑客能够从 Coldcard 用户那里窃取近 1.2 亿美元的比特币以来，硬件钱包安全问题一直是一个热门话题。
The products, made by Canadian company Coinkite, contained a firmware bug which led to faulty seed generation, allowing hackers to essentially guess investor seedphrases.
这些由加拿大公司 Coinkite 制造的产品存在固件漏洞，导致种子生成错误，使黑客能够基本上猜出投资者的助记词。
In a separate incident, hardware wallet manufacturer Trezor last month reported that close to 81,000 customers had their details leaked after its third-party fulfillment partner had data stolen.
在另一起事件中，硬件钱包制造商 Trezor 上个月报告称，由于其第三方配送合作伙伴的数据被盗，近 81,000 名客户的详细信息泄露。
Criminals have been targeting data this year, with scammers getting hold of customer information via crypto wallet Ledger’s payment processor Global-e to send phishing emails.
今年，犯罪分子一直将数据作为攻击目标，诈骗分子通过加密钱包 Ledger 的支付处理商 Global-e 获取客户信息，以发送网络钓鱼邮件。
This post Ledger Investigates Fund Losses Tied to Southeast Asian Reseller After Implant Found in Device first appeared on Bitcoin Magazine and is written by Mathew Di Salvo.
本文《Ledger 调查与东南亚经销商相关的资金损失，因在设备中发现植入物》最初发表于 Bitcoin Magazine，由 Mathew Di Salvo 撰写。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力