A tampered Ledger hardware wallet attack that has already resulted in an estimated $93.4 million in losses from Asian users has reportedly spread to Europe. European consumer electronics chain MediaMarkt reportedly sold a Ledger device containing an earlier version of the implant found in devices shipped by CryptoBilis in Asia. No funds have been stolen from the European device, suggesting the implant may not have worked or the attackers were waiting for wider usage. Former Mt Gox CEO Mark Karpeles noted the antenna in the device indicated it was the “Eurasian version,” implying different implants for different regions. Ledger has not confirmed the European device is part of the same attack.
Security firm Veria Labs discovered a critical XRP bug that could have allowed the minting of 18 trillion XRP out of thin air. The bug, hidden in XRP’s code since 2015, was patched three days after being reported on September 22. Veria Labs co-founder Cayden Liao stated that a single transaction could have created more than 18 trillion XRP, putting the entire $94 billion market cap at risk. The bugs were low severity individually but dangerous when combined.
Ethereum co-founder Vitalik Buterin supported researcher Justin Drake’s warning that AI advances could undermine blockchain cryptography before quantum computers do. Buterin advised caution but did not recommend immediate action. Drake urged the industry to prepare for “bunker mode” amid OpenAI’s release of new mathematical findings, raising concerns about AI uncovering vulnerabilities in cryptographic structures. Critics dismissed the warnings as fearmongering without evidence.