A Hardware Wallet Needs a Supply-Chain Receipt
Ledger confirmed an unauthorised implant in a device sold through CryptoBilis. Here is why an authenticity check could still pass, what affected buyers should do, and what everyone else can leave alone.
Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.
Since I have been asked this a lot: The best way to support this site, is to buy my books.
Ledger confirmed an unauthorised implant in a device sold through CryptoBilis. Here is why an authenticity check could still pass, what affected buyers should do, and what everyone else can leave alone.
MetaMask reported an infrastructure incident in its staking operation while saying it found no indication that wallets or customer funds were affected. Here is how to separate those systems, check your own position, and avoid the scams that follow security news.
Bitget says customer balances survived a large wallet breach, but withdrawals are returning in phases. Here is a calm way to judge exchange risk, protect your account, and decide what belongs in your own wallet.
A compromised newsletter service sent a false Trezor warning through a genuine mailing route. Here is the wallet-backup rule that works even when the sender looks right.