硬件钱包被动手脚：Ledger确认一台受害设备藏有未授权植入硬件，链上估算损失高达9,320万美元、315个钱包被掏空
加密货币硬件钱包厂商Ledger本周末确认，一名资金受损用户的设备中被发现装有"未授权硬件植入物"——这是这起东南亚经销商供应链事件中，厂商首次证实设备遭到物理篡改。据Cointelegraph等媒体报道，事件源头是Ledger在印度尼西亚、马来西亚与菲律宾的授权经销商CryptoBilis：10月9日，Ledger宣布正调查多名经该渠道购机用户的资金被掏空报告，并要求CryptoBilis暂停销售；10月10日，Ledger在情况更新中确认了植入物的存在。
损失规模仍在上修。区块链数据公司Bitquery的链上追踪显示，共有315个钱包、横跨波场（Tron）、比特币、以太坊、BNB Chain、Polygon与Solana六条链被掏空，总额约9,320万美元，其中约四分之三集中在波场链；泰达公司（Tether）已冻结约1,000万美元涉事USDT。
攻击手法直指硬件钱包安全模型最脆弱的一环：助记词（恢复短语）。有拆解分析称，植入物藏在屏幕后方，在用户首次设置设备、屏幕显示助记词的那一刻将其读取。Ledger强调，其自身基础设施、系统与服务没有被攻破，事件目前看局限于单一经销商及其市场。
对持有加密资产的南加华人读者，实用要点：若近90天内经CryptoBilis购买过Ledger设备，未启用的不要初始化，已启用的应考虑把资产转移到使用全新助记词的新设备上；硬件钱包只通过厂商官网或可信授权渠道购买。
（资料来源：Cointelegraph、Bitquery）
Ledger Confirms Unauthorized Hardware Implant in a Victim's Wallet as On-Chain Estimates Put CryptoBilis-Linked Losses at $93.2 Million Across 315 Wallets
Hardware-wallet maker Ledger has confirmed that a device belonging to one victim of a widening crypto drain contained an unauthorized hardware implant — the company's first confirmation of physical tampering in a supply-chain case centred on CryptoBilis, its authorised reseller in Indonesia, Malaysia and the Philippines. Ledger said on Oct. 9 that it was investigating reports of drained wallets among the reseller's customers and asked CryptoBilis to halt sales; in an Oct. 10 update it confirmed the implant.
On-chain investigators have tallied losses well beyond the first reports. Bitquery counts $93.2 million taken from 315 wallets across Tron, Bitcoin, Ethereum, BNB Chain, Polygon and Solana, with roughly three-quarters on Tron; Tether has frozen about $10 million in related USDT.
The suspected mechanism targets the wallet's most fragile moment: setup, when the recovery phrase appears on screen. Ledger advises anyone who bought a device from CryptoBilis in the past 90 days not to initialise an unused device, and, if they have already set one up, to consider moving assets to a new signer generated from a fresh seed.
(Sources: Cointelegraph, Bitquery)
图片来源：图：手持的Ledger硬件钱包实物，屏幕与品牌标识清晰可见。摄影：Roderart，CC BY-SA 4.0，来源：Wikimedia Commons
