Twitxy Saved

Clément Lesaege

Verified account This account is verified. Learn more

@clesaege

Chiang Mai Joined May 2012
1.7K Following 4.6K Followers 6K Posts

Latest posts 5

Clément Lesaege Verified account @clesaege
Slopecore is starting to become my new favorite music genre. Anyone hosting a slopecore party during @EFDevcon?
Obie Fernandez Verified account @obie Oct 13
As all programmers start taking the work of their coding agents completely for granted, the AI notices who still reads every line. 😍

New slopcore from yours truly!
h/t @anabology for Claudia
View quoted post on X
Clément Lesaege Verified account @clesaege
Unpopular opinion: Mark Karpelès was actually the good guy.
@MagicalTux
Bitcoin News Verified account @BitcoinNewsCom Oct 9
LEDGER SUPPLY CHAIN ATTACK MAY HAVE BEEN EXPOSED BEFORE MASS WALLET DRAIN

Former Mt. Gox CEO Mark Karpelès may have inadvertently triggered a coordinated wallet drain after publicly exposing physically modified Ledger devices containing hidden surveillance implants.

On October 8, Karpelès warned that counterfeit or tampered Ledger devices were being sold with concealed SIM cards capable of transmitting stolen seed phrases.

The implants reportedly intercept data sent to the device’s screen, allowing attackers to capture recovery phrases displayed during wallet setup.

Crucially, these devices can reportedly pass Ledger’s official Genuine Check because the original secure element remains intact. The verification process cannot detect unauthorized physical modifications.

One theory now emerging is that attackers had been harvesting seed phrases from compromised devices, waiting to drain multiple wallets simultaneously.

Karpelès’ warning reportedly attracted roughly 90,000 views, potentially alerting the attackers that their operation had been exposed and prompting them to move stolen funds.

Karpelès says one compromised Ledger he examined originated in Malaysia, arrived in flawless shrink-wrap packaging, and contained an implant cleverly concealed beneath the screen.

The suspected attack vector is a hardware supply chain compromise, not a cryptographic vulnerability.

The connection between Karpelès’ warning and the subsequent wallet drains remains unconfirmed, as does whether the same implants were responsible.

If established, the incident would demonstrate how compromised hardware can undermine self-custody even when a device passes manufacturer authentication.
View quoted post on X