Tampered Ledger devices reach Europe as AI finds XRP bug
A Ledger implant attack linked to $93.4m of losses in Asia has reportedly appeared in Europe, while Veria Labs won a $250,000 bounty for an XRP minting bug.
Key points
- A European user says he bought a tampered Ledger from MediaMarkt two weeks ago; no funds were taken from it.
- Yfarmx estimated $93.4m in losses across 471 addresses from the Asian attack, a figure Ledger has not confirmed.
- Veria Labs found an XRP overflow bug that could have created over 18 trillion XRP; RippleX patched it three days after a 22 September report.
An X user named Johannes posted photographs of a tampered Ledger he said he bought two weeks ago from the European electronics chain MediaMarkt.
Former Mt Gox chief Mark Karpeles, whose investigations helped expose the Asian tampering, said the antenna in the European device is the "Eurasian version", suggesting separate implants were sent to regions using different mobile frequencies. The attack hit Asian devices late last week after CryptoBilis units were found modified to read seed phrases while still passing authenticity checks.
Separately, security firm Veria Labs was paid a $250,000 bug bounty for finding an overflow bug in XRP's code that had been hidden since 2015. Its co-founder Cayden Liao said an AI agent combed through rippled and found two low severity bugs that, chained together, could have let one transaction create more than 18 trillion XRP, 184 times the total supply.
What to watch: Ledger customers who bought devices from CryptoBilis in the past 90 days are advised to consider moving assets to a new Ledger.
Live updates on NewsFeeds:AltcoinsDesk editor: Keshav Aggarwal (accountable for this page; this summary was not edited by hand)
How this was produced: an AI model wrote this summary of Cointelegraph’s report, which we credit and link above. Read our Editorial and AI policy. Spotted a mistake? See Corrections.
Not investment advice. Read the risk disclaimer.