Secret Spy Implants Inside Ledger Wallets Linked to $86 Million Crypto Theft

Over $86 million in cryptocurrency has been stolen from hundreds of hardware wallets after attackers physically tampered with Ledger devices to secretly intercept passphrases during setup. The sophisticated heist came to light following mounting complaints from users who discovered their accounts had been drained, prompting an investigation into modified devices sold through a third-party retailer.

came to light= 真相大白、公諸於世（指原本隱瞞的事實為人所知）prompting an investigation into= 引發或促成了針對……的正式調查

Photos and video recordings shared on X and Threads appear to show a tiny circuit board sandwiched underneath the wallet's screen. The hidden implant allegedly captures everything displayed on the screen, including the confidential seed passphrase generated when an owner sets up the device for the first time. Using an embedded SIM card, the rogue chip then transmits this sensitive data back to the attackers, allowing them to siphon funds from the compromised accounts.

sandwiched underneath= 緊緊夾在……的正下方allowing them to= 使其得以（達成某種行動或結果）

Ledger confirmed that at least one affected device contained an "unauthorized hardware implant." However, there is no evidence that the company's internal systems were breached or that wallets ordered directly from Ledger were compromised. Instead, the incident appears to be a supply chain attack primarily impacting customers in Southeast Asia who purchased their devices from the reseller CryptoBillis. Ledger has requested that CryptoBillis pause all sales during the inquiry and has published guidance to help owners determine if their hardware has been altered.

Ledger 證實至少有一台受影響的裝置含有「未經授權的硬體植入物」。然而，目前沒有任何證據表明該公司的內部系統遭到入侵，也沒有證據顯示直接向 Ledger 訂購的錢包受到影響。相反地，這起事件似乎是一場供應鏈攻擊，主要波及向經銷商 CryptoBillis 購買裝置的東南亞客戶。Ledger 已要求 CryptoBillis 在調查期間暫停所有銷售，並發布了指引，以協助擁有者判斷硬體是否曾遭竄改。

there is no evidence that= 用於正式表示沒有證據支持某項指控的表達方式primarily impacting= 主要波及或影響（特定群體或地區）

學習筆記

文法整理

句型	意思
came to light	真相大白、公諸於世（指原本隱瞞的事實為人所知）
prompting an investigation into	引發或促成了針對……的正式調查
sandwiched underneath	緊緊夾在……的正下方
allowing them to	使其得以（達成某種行動或結果）
there is no evidence that	用於正式表示沒有證據支持某項指控的表達方式
primarily impacting	主要波及或影響（特定群體或地區）

詞彙整理

單字	意思
heist	竊盜或搶劫的行為，尤指事先策劃、以暴力或威脅手段掠奪財物的案件。
implant	植入人體組織或器官中，並長期留置的人工裝置或替代物。
inquiry	為了取得資訊、了解情況或尋求答案而提出的問題或請求；詢問。
guidance	對作法、決定或行動方向所提供的建議或指示。
tampered	夯實器；用來把材料壓實或填緊的工具。
siphon	虹吸管；利用液體高低位置的差異，使液體經由管子流到較低處的管子。
compromised	雙方各自讓步後所達成的折衷方案或協議。
breached	違反法律、契約、承諾或應盡義務的行為；未履行承諾或義務。

延伸學習

•在資安領域，「supply chain attack（供應鏈攻擊）」指的是攻擊者不直接入侵製造商的核心防禦系統，而是鎖定經銷商或物流等薄弱環節進行滲透與改造。
•新聞報導中常使用「drain an account（清空/榨乾帳戶）」來形容資金被全數洗劫一空的嚴重情況，比起單純的「stolen」更具畫面感與急迫性。
•硬體層面的「implant（植入物）」屬於旁路威脅，能直接側錄螢幕畫面，從而繞過加密晶片與軟體層面的嚴密保護機制。