r/ledgerwallet

I am one of the victims of this incident who lost almost 100k USDT. People who put blame on the victim saying that they deserved it for buying from a reseller is just plain idiot. I did try to place an order through the Ledger official site at first but my order got cancelled quickly. Hence I went to their site to look for alternatives and there you go. Cryptobillis is listed on their site under "Malaysia". Its literally trying to tell you Hey, if you want to buy an official product from us in Malaysia feel free to visit this store. And much contrary to what most of the people think, no I DID NOT get a discount on Cryptobilis. They are listed at the same price. "Reseller" here means official authorized distributor appointed by Ledger. They are selling brand new products with intact and sealed packaging. They are not second hand used Ledger and you are not the only smart guy in the world to know we should not buy a used Ledger. LEDGER SHOULD BE RESPONSIBLE FOR THIS. We literally trusted you and did what you told us to do and got drained. Pay back to the victim and then go after Cryptobillis is the only right thing to do.

https://preview.redd.it/61qwh026fnuh1.png?width=1577&format=png&auto=webp&s=00017ca068c5455680cef759f31a16ade6bd6071

https://preview.redd.it/j7sokkgoenuh1.png?width=1883&format=png&auto=webp&s=b6fbf53fb005dcbfe0484a0b6fcdfe10f945eebc

I remember in 2022 when I was shopping for a ledger I bought one of Amazon. In this forum I was recommended to not use it and buy from the manufacturer. The exact reason was to avoid a physically tampered with device. The idea of having something record the device inputs and send it via sim is nothing new. This is just the first time an authorized seller decided to do it on a large scale. What ledger needs to do is update their genuine check to discover any of these possible defects. There is work to be done, but thinking all ledgers are now compromised is ridiculous.

Following the reported supply-chain attack on Ledger devices sold by a third-party reseller in Southeast Asia, I've been thinking about whether a Trezor with a passphrase (the "25th word") would have been protected.

According to current reports, a hidden implant captured the recovery words as they were displayed on the device screen during setup and passed them to the attackers. If that's accurate, here is my reasoning:

- On the Trezor Model One and Safe 3, the passphrase can only be entered in Trezor Suite on the computer. It is never shown on the device screen.

- The touchscreen models (Model T, Safe 5, Safe 7) can take it on the device, but that is optional.

- So a screen-capturing implant could get the seed but not the passphrase, and the attacker would only be able to rebuild the empty default wallet.

- A keylogger or malware on the computer could capture the passphrase, but without the seed that alone doesn't put funds at risk, and the reverse is also true. An attacker needs both.

Given this, is it fair to say Trezor's passphrase implementation is more secure than Ledger's against this kind of attack, or am I missing something?

Stay safe everyone 🙏.

People keep asking, “Why did you buy from a reseller? Just to save a few bucks? Are you stupid?”
CryptoBilis was an official Ledger-authorized reseller with physical stores as well as online sales. What more were customers supposed to verify before buying to avoid being called stupid?
Anyone could have been a victim. The Ledger and CryptoBilis victims are still trying to process what happened and may not have the time or energy to post in the community yet. Just wait. I believe we’ll see many more victims come forward soon.

I was prompted to install update 1.7.0 for my Nano S+ and Flex. I wanted to look up what had changed, but according to the Ledger website, 1.6.1 is the latest version. Does anyone have more details?

Hi guys,
Newbie here

So i just got my new ledger flex which btw was my first ledger experience and after a while of working with it today morning i accessed the app to swap to bitcoin, it prompted me to download an update 1.17 or smtng like that so i connected it using bluetooth and autorised everything etc after a while the ledger entred boot mode and got disconnected

it is now stuck on updating and the circle doesnt even move. I got advised to keep it like that untill bettry runs out . I even still have the warranty with it in case
Any advise would be appreciated

Thanks

Got a call that came from Royal Candian Mounted Police which looked legit. Very detailed and thorough. Then got the follow.up call( almost too quickly) from Ledger and started to get suspicious. While on the phone I googled RCMP ledger scams and saw this on Reddit and immediately hung up. Be careful out there.

Hi everyone,

I recently purchased a brand new Ledger from Media Expert (for context: Media Expert is one of the largest official electronics retail chains in Poland, similar to Best Buy or Currys – it is strictly a store for brand-new consumer electronics, not a secondhand or pawn shop).

When I unboxed it, I noticed that the device was shrink-wrapped and the screen itself had the clear factory protective film intact. However, after sliding open the metallic swivel cover, I noticed some visible fingerprints on the gray metal body/cover underneath.

I’m carrying a significant amount of crypto, so I'm naturally hyper-cautious and feeling a bit anxious about hardware integrity.

From what I understand:

1. As long as I set it up as a new device and generate my 24-word recovery phrase directly on the Ledger's physical screen (never on a phone/PC), and

2. The device passes the Genuine Check in the official Ledger Live app (attesting the Secure Element ST33 chip and untampered firmware),

the device is 100% secure, and fingerprints on the metallic cover are likely just from factory assembly/quality control or a store return.

Could anyone confirm if this is standard? Does a successful Genuine Check in Ledger Live provide 100% cryptographic certainty that the hardware/firmware hasn't been tampered with, even if the metal shell was touched during manufacturing?

Thanks in advance for helping ease my mind