Ledger

A flaw in a MediaTek chip used in many Android phones lets attackers take full control of the device, and it cannot be fixed because it sits in the chip’s hardware. Ledger says this makes storing crypto keys on affected phones unsafe, as the weakness allows attackers to bypass security during startup.

Former SAF officer Teo Rong Xuan stole US$1.7 million in cryptocurrency using a victim’s seed phrase. He spent the funds on luxury items, gambling, and mortgage payments.

Ledger has launched a new offline backup tool called the Recovery Key, which helps users regain access to their wallets without using the internet or cloud services. It works by tapping a smart card to a Ledger device and entering a PIN, offering a more private way to recover crypto access.

Hackers are targeting Mac users with fake Ledger Live apps that steal their 24-word seed phrases, allowing them to take full control of victims' crypto wallets. These fake apps are spread through malware like Atomic macOS Stealer and are made to look real, tricking users into giving away their recovery phrases.

Ledger has launched a special Solana-themed version of its Flex wallet, featuring custom tools and a built-in Soulbound Token to show proof of ownership. The wallet supports many blockchains but gives Solana users extra benefits, including possible future rewards.

Scammers are sending fake letters to Ledger users, pretending to be from the company and asking for their wallet recovery phrases. The letters target people affected by a past data leak, and Ledger has warned users not to share their 24-word phrase under any circumstances.

Phishing attacks targeting Ledger users are on the rise, with scammers sending fake emails about a nonexistent security feature called "Ledger Clear Signing." These emails urge users to provide sensitive information, putting their cryptocurrency at risk.

Ledger commits to reimbursing users post-exploit and enhancing security by discontinuing blind signing, shifting towards Clear Signing standards.

Ledger announces an end to blind signing for Ethereum dApps by 2024, following a recent exploit, enhancing security and user transparency.

Scammers exploit fake Ledger Live app on Microsoft Store, stealing over $760,000 worth of Bitcoin from unsuspecting users.