Latest news about Bitcoin and all cryptocurrencies. Your daily crypto news habit.
Ledger claimed that the recently uncovered vulnerabilities in their hardware wallets are not critical.
Ledger claimed that recently uncovered vulnerabilities in its hardware wallets are not critical in an official Medium blog post on Dec. 28.
Yesterday at the 35C3 Refreshing Memories conference in Berlin, researchers claimed that they were able to hack the Trezor One, Ledger Nano S and Ledger Blue cryptocurrency wallets.
In the post, the company explains that there appeared to be âthree attack paths which could give the impression that critical vulnerabilities were uncovered,â but according to them âthis is not the case.â
The reason Ledger says that the vulnerability is not critical is that âthey did not succeed to extract any seed nor PIN on a stolen deviceâ and âsensitive assets stored on the Secure Element remain secure.â
According to the company, the Ledger Nano S vulnerability âdemonstrated that physically modifying the Ledger Nano S and installing malware on the victimâs PC could allow a nearby attacker to sign a transaction after the PIN is entered and the Bitcoin (BTC) app is launched.â
This, Ledger claims, is âquite unpractical, and a motivated hacker would definitely use more efficient tricks.â While the researchers claimed that the vulnerability allowed them to âsend malicious transactions to the ST31 [the secure chip] and even confirm it ourselvesâ Ledger denies its, stating:
âTheir firmware runs snake on the MCU in Bootloader mode. This means that you have to push the left button at boot and the Secure Element does not even boot.â
Ledger also claims that the demonstration of the Ledger Blue attack is âa bit unrealistic and not practical,â claiming that âthe position of the receiver and the attacked device must be exactly the same, âthe position of the USB cable is also paramount (as it acts as an antenna).â
Disclaimer
The views and opinions expressed in this article are solely those of the authors and do not reflect the views of Bitcoin Insider. Every investment and trading move involves risk - this is especially true for cryptocurrencies given their volatility. We strongly advise our readers to conduct their own research when making a decision.