A security researcher flagged a fake Ledger wallet phishing website ranking high on Google Search, reportedly attracting over 1 million visits monthly by targeting users' recovery phrases. Former Mt. Gox CEO Mark Karpelès discovered a hidden implant in a tampered Ledger device, and Ledger is investigating $86M+ in losses linked to Southeast Asian reseller CryptoBilis. Separately, Velo Protocol launched a content creator bounty campaign offering 600 USDT in prizes for original content about the Velo × Zebec Card partnership.
SlowMist security researcher 23pds analyzed a compromised Ledger device purchased by Mark Karpelès that contained a spy module with an embedded SIM card in the screen padding. The malicious module could intercept and transmit mnemonic phrases displayed on screen via LTE, bypassing the secure element's protection of private keys.