Ledger attack spreads to EU, AI finds ’18 trillion XRP’ bug: Hodler’s Digest
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
A tampered Ledger hardware wallet attack that caused estimated losses of $93.4 million in Asia has reportedly spread to Europe, with a tampered device found in MediaMarkt stores. The implant found is an earlier version linked to Asian attacks but no thefts from European devices have yet been reported. Separately, security firm Veria Labs uncovered a critical overflow bug in XRP's code that could potentially have minted over 18 trillion XRP; it was patched after discovery with no evidence of exploitation.
Why it matters
The Ledger hack spreading to Europe raises concerns about hardware wallet supply chain security and potential widespread user fund losses. The XRP bug shows vulnerabilities in major crypto protocols that, if exploited, could threaten massive market cap value, highlighting the importance of ongoing security audits. The source does not explicitly state wider market impacts but implies significant risk to users and ecosystems.
Key context
Ledger’s attack originated from compromised devices sold by CryptoBilis in Asia, allowing attackers to read seed phrases despite authenticity checks. CryptoBilis has been asked to suspend sales. XRP’s overflow bug was present since 2015 but only recently discovered via AI-assisted code review. Vitalik Buterin also expressed concern about AI’s potential to undermine blockchain cryptography. Samsung plans to add USDC transfers to its wallet, showing ongoing crypto integration in mainstream products.
Key numbers and entities
The Ledger implant attack caused an estimated $93.4 million loss across 471 addresses, with CryptoBilis as implicated reseller. Veria Labs received a $250,000 bounty for the XRP bug, which could have created 18 trillion XRP—184 times its total supply. Vitalik Buterin and Justin Drake commented on AI risks to crypto cryptography. Samsung will enable USDC transactions for 82 million US Galaxy users starting October.
What remains unclear
It is not confirmed whether the European tampered devices are fully part of the same attack campaign as in Asia, nor if funds have been stolen from these devices. The exact scale of devices impacted beyond Asia remains unspecified. Details on how the XRP overflow bug could have been exploited or its discovery process remain limited. The source does not clarify the wider impact on market prices or regulatory responses.