Ledger has confirmed that hardware implants in its signers, sold through a reseller, allowed attackers to intercept 24-word recovery phrases. On-chain investigators estimate losses at $86 million.
A new hardware attack called DDRop allows attackers to bypass memory encryption in Intel and AMD confidential computing environments by silently dropping memory writes.
