头条Lead加密Crypto · 硬件钱包信任折价Hardware wallet trust
Ledger 确认硬件植入:转售设备致损或达 9,300 万美元Ledger confirms hardware implant: tampered reseller devices may cause $93M loss
黑客被指收购转售商控制供应链,硬件钱包信任折价或加速资金流出。
Hackers allegedly bought reseller to control supply chain; hardware wallet trust discount may accelerate outflows.
硬件钱包的安全模型假设设备从出厂到用户手中不被篡改,但这次的证据显示,即使厂商的直销渠道无虞,第三方分销环节仍可能被植入后门。攻击者通过控制转售商,绕过了厂商对直接渠道的严格审核,这种攻击方式比篡改固件更隐蔽,因为用户无法验证设备的物理完整性。事件发生时,10 年期美债收益率 5.24% 的高位使无风险资产吸引力上升,加密 ETF 上周终结连续三周净流入,资金转向盈利确定的美股大盘,硬件钱包的信任折价进一步压制自托管需求。不过,已确认案例均涉及单一转售商,且受损设备数量有限,Ledger 内部系统未受影响;如果后续调查证明这是孤立的分销渠道问题,市场冲击可能仅限于短期情绪。
The security model of hardware wallets assumes devices remain untampered from factory to user, but this evidence shows that even if the manufacturer's direct channels are secure, third-party distribution links can be compromised. Attackers bypassed strict direct-channel controls by controlling a reseller, a method more covert than firmware tampering because users cannot verify physical integrity. The incident comes as the 10-year Treasury yield at 5.24% boosts risk-free assets, crypto ETFs ended a three-week inflow streak last week, and capital rotated into profitable large-cap equities; the hardware wallet's trust discount further suppresses self-custody demand. However, confirmed cases so far involve a single reseller, affected devices appear limited, and Ledger's internal systems were unaffected; if the investigation proves this an isolated channel issue, market impact may be limited to short-term sentiment.
来源Sources CoinDesk · The Defiant