logoalt Hacker News

lxgr • today at 4:23 PM • 1 reply • view on HN

What would you be doing differently? There are many hardware wallet vendors out there, and I consider Ledger to be relatively sophisticated. This attack was extremely sophisticated as well.


Replies

tristor • today at 5:01 PM

The attack was sophisticated, but Ledger appears to have taken almost zero precautions against hardware attacks, which made this attack simpler and cheaper to pull off. There are very few precautions that would have completely eliminated the possibility of this attack, but it would have been straightforward to make it more expensive, primarily by investing in tamper proofing and tamper evident design. There are several other comments in this thread that go into fair detail about some examples of these techniques.