Not mentioned in article: MediaMarkt, the German equivalent of Best Buy, was selling these compromised devices on store shelves in every city in Germany.

▲

mikeryan 2 hours ago | parent | next [-]

Selling Ledger wallets or compromised Ledger wallets? My understanding was a reputable reseller (Cryptobilis) was bought and then the wallets were modified via the reseller chain. This isn’t on Ledger it’s a (literal) supply chain attack. Unless MediaMarkt was buying via the reseller?

▲

veganmosfet 2 hours ago | parent | next [-]

according to this guy, compromised (https://x.com/0xJohannes_/status/2109240472933671125). Interestingly, Mediamarkt removed the device from their shop quickly after (https://www.mediamarkt.de/de/product/_ledger-sas-nano-s-plus... now 404).

	▲	jeremyjh 2 hours ago \| parent [-]
		They would remove them regardless of known compromise, because they have no way to verify it in-house and it’s the simplest PR and legal strategy.

▲

chinathrow 2 hours ago | parent | prev [-]

> This isn’t on Ledger it’s a (literal) supply chain attack.

Supply chain attack?

"Can't do shit, not my problem."

If it was that easy to shed responsibility.

	▲	mikeryan an hour ago \| parent [-]
		TBF that characterization was mine. It’s not been Ledger’s response AFAIK.

▲

blensor 3 hours ago | parent | prev | next [-]

I wonder what the liabilities are for that

▲

drob518 3 hours ago | parent [-]

Not much unless you can show that they knew about it. Otherwise, they are just as much a victim.

	▲	V__ 2 hours ago \| parent [-]
		They are liable. In Germany the seller of a product is responsible not the producer.

▲

superze 19 minutes ago | parent | prev [-]

Why doesn't it surprise me that the shittiest company Media Markt is somehow involved in this. These guys are about to close shop anyway, rest in piss Mediamarkt.