Uneasy Money: Why Ledger's Supply Chain Became a Nearly $100M Target

The Ledger-related supply-chain attack reportedly stole $70 million to $100 million over roughly three to five months: genuine devices bought through an authorized reseller had added LTE hardware that could intercept seed phrases while leaving the CPU and firmware intact. The speakers warn that panic about the incident can prompt further losses through fake apps, ads, phishing sites, emails, and calls, while noting that recent reports they were handling were not drains caused by rogue LTE modems.

The speakers favor custody and recovery setups that reduce single points of failure but remain easy to execute: multisig or Shamir sharing can distribute access, and one example splits a 24-word seed into three parts, requiring two to recover it. They also warn that complicated procedures can cause losses, such as writing seed words in the wrong order, and argue that users need a way to display a seed if they are expected to back it up themselves.

The speakers describe hardware wallets as a way to narrow compromise points and protect assets even when a computer has malware, but note that paper storage prevents transactions. They question the economics of a device costing about $100 when it might protect $20 million, while emphasizing that recovery and security procedures must remain usable.

One speaker argues that an iPhone bought through an official Apple store is less exposed to supply-chain compromise because an individual buyer is difficult to distinguish among a billion customers, while stressing this is security through obscurity, not a guarantee. The speaker contrasts ordinary buyers with government officials receiving custom iPhones, whose higher value makes their devices more attractive espionage targets; crypto hardware-wallet buyers may also be targeted because they are likely to hold valuable assets.

The speakers describe Coinbase's cold-storage key generation as an effort to reduce attack surface, using a random location, a Faraday cage, and precautions against power, Wi-Fi, and printer-based attacks for keys holding millions or billions of dollars. That concern about reducing compromise points aligns with the broader argument that hardware wallets can protect users even when their computers are compromised.

The speakers question whether a bounty would deter an XRP infinite-mint exploit if an attacker expected to mint and launder more than the reward; the $21 million example is hypothetical, and deterrence is left uncertain. They also note that $50,000 can look small beside a chain's potential losses, but argue that tying bounties to those losses could make programs unaffordable and weaken the security ecosystem; a Google vulnerability search, they say, involved three or four people, six days, and $40,000 in compute costs.