A hole pierced by a dealer: a $100 liability cap cannot cover a loss of 90 million yuan

On the morning of October 13, Ledger released the longest official notice since the incident, written by Gu Yu. For the first time, Ledger Donjon's security team broke down the attack path to the component level: an implanted module is hidden in the device shell and used to "read the data displayed on the screen"-when the device is initialized, the screen displays 24 words of mnemonic. After the module recognizes these interfaces, they are decoded by the microcontroller, and then sends the information over LTE with the help of a pre-configured eSIM. What's more noteworthy is that there is another clarification immediately after: the implant module is a separate component and does not change the security component, nor does it change the operating system, let alone the transaction or signature. The chip is real, the system is original, and every transaction is confirmed by the user himself-all of the inspections the industry taught users to do have passed. The mnemonic words only appeared on the screen for a few dozen seconds, but they had already been copied.