OneKey analyzes Ledger supply chain attacks and proposes five security improvement measures

Regarding the suspected tampering of Ledger devices sold through the CryptoBilis channel, which led to the theft of approximately $90 million in assets, OneKey founder Yishi stated that OneKey has not received any reports of damage as of October 10th. OneKey announced five improvement measures after analyzing the path of Ledger hardware supply chain implantation attacks, including upgrading anti-counterfeiting packaging, launching an initialization process for screen free display, and promoting communication encryption within the motherboard bus at the firmware and hardware levels. Yishi hopes that manufacturers, researchers, and distribution partners can work together to study the delivery process of equipment and the transmission of sensitive data within the equipment.