OneKey Analyzes Ledger Hardware Supply Chain Attack Path, Proposes Five Improvement Measures for Hardware Wallets

October 10: In response to the incident where Ledger devices sold through the CryptoBilis channel were suspected of being tampered with, resulting in the theft of approximately $90 million in assets, OneKey founder Yishi stated that as of October 10, OneKey had not received any related reports of damage.

After an in-depth analysis of the attack path involving a supply chain implant attack on Ledger hardware, OneKey announced five improvement measures, including upgrading anti-counterfeiting packaging, launching a screen-free initialization process, and advancing encryption of internal communications on the motherboard bus at the firmware and hardware levels. Yishi hopes that manufacturers, researchers, and distribution partners can work together, as they need to carefully study how devices reach users and how sensitive data is transmitted within the devices.