Connect with us
DAPA Banner

Crypto World

Researcher uncovers fake Ledger Nano S modified to siphon crypto assets

Published

on

Counterfeit Ledger device.

This article has been updated with comments from a Ledger spokesperson.

A Brazilian security researcher has uncovered a sophisticated counterfeit Ledger device operation after discovering modified hardware designed to siphon cryptocurrency from unsuspecting users.

Summary

  • A Brazilian security researcher identified a sophisticated hardware compromise in a counterfeit Ledger Nano S Plus that utilized modified firmware to capture user recovery phrases.
  • Physical inspections of the fraudulent device revealed the addition of unauthorized WiFi and Bluetooth components alongside a secondary manufacturer’s chip hidden beneath scraped markings.
  • The operation relies on a deceptive QR code included in the packaging to lure users into downloading a malicious application designed to bypass official security checks.

The security researcher, known online as “Past_Computer2901,” shared findings on Reddit after purchasing what appeared to be a standard Ledger Nano S Plus from a Chinese marketplace. 

Advertisement

Despite the packaging and price point matching official retail standards, the unit failed a “Genuine Check” when connected to the authentic Ledger Live desktop application. 

This red flag led to a physical teardown of the device, revealing that the internal circuitry had been altered to include WiFi and Bluetooth antennas—features entirely absent from the legitimate model.

Hardware manipulation and malicious redirects

Scammers are utilizing these tampered devices to exploit first-time buyers through a deceptive setup process. 

A QR code included in the packaging directs users to a fraudulent version of the Ledger Live app, which is programmed to bypass security warnings and issue a fake verification of the hardware’s authenticity. 

Advertisement

Once a user follows the prompts to generate or enter a seed phrase, the compromised firmware captures the data, allowing the attackers to drain the wallet at will.

“This isn’t meant to cause panic, but rather to serve as a serious warning — I’m honestly still a bit shaken by the sheer scale of this operation,” the researcher noted.

Internal analysis of the unit showed that the scammers went to great lengths to hide the fraud, including scraping off original chip markings.

Advertisement
Counterfeit Ledger device.

Counterfeit Ledger device. Source: Reddit. 

While the device initially identified itself as a Nano S Plus 7704 during the boot phase, the final sequence revealed the manufacturer as Espressif Systems, a Shanghai-based semiconductor firm. 

These modifications fundamentally break the security premise of Ledger products, which are built to keep private keys in a strictly offline environment.

“When purchasing from a marketplace, Ledger strongly encourages users to verify the identity of the seller. Users should ensure they only download the official Ledger Wallet apps on desktop and mobile. The situation involved counterfeit hardware, paired with a fake companion app flow designed to simulate the onboarding process, distributed through unofficial channels,” a Ledger spokesperson told crypto.news.

“Ledger will never ask users for their 24 words. If anyone claiming to be Ledger, or any app that purports to be a Ledger app, asks for your 24 words, you should immediately assume it is a scam,” they added.

Advertisement

The discovery follows a separate incident earlier this month where a fraudulent app bypassed Apple App Store security via a bait-and-switch tactic. The malicious software successfully tricked over 50 people into revealing their recovery phrases, resulting in the theft of $9.5 million before the platform removed the listing. The app has since been removed for malicious bait-and-switch functionality, according to Apple.

“Stay safe out there. Only download Ledger Live from ledger.com. Only buy hardware from ledger.com. If your device fails the Genuine Check — stop using it immediately,” the researcher cautioned.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

TRX Now Live on Binance.US as TRON DAO Expands Regulated U.S. Market Access

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR:

  • TRX is now tradable on Binance.US with TRX/USD and TRX/USDT pairs live for U.S.-based users.
  • The listing gives American investors regulated and compliant access to the TRON blockchain network.
  • TRON DAO says the move supports long-term growth by expanding TRX availability on licensed platforms.
  • USDT on TRC20 remains central to TRON’s ecosystem as CEX liquidity grows through this new listing.

TRX, the native token of the TRON blockchain, is now available on Binance.US. TRON DAO made the announcement on April 17, 2026.

The listing brings TRX to a licensed, U.S.-regulated digital asset exchange. Trading is live with TRX/USD and TRX/USDT pairs.

This move expands access for American investors through a compliant market channel. It also adds liquidity to one of the most widely used blockchain networks globally.

TRX Gains a Foothold in Compliant U.S. Markets

The listing marks a direct entry point for U.S. users into the TRON ecosystem. Binance.US operates as a compliance-first exchange, meeting regulatory standards required in the United States. As a result, TRX now reaches a broader audience through a trusted and licensed platform.

TRON DAO shared the development on its official X account, stating: “Trading is now live with TRX/USD and TRX/USDT pairs, expanding access for Binance.US users.” The post added that the listing strengthens TRX availability within compliant U.S. market infrastructure. It also noted support for enhanced liquidity and broader accessibility across established digital asset markets.

Advertisement

Community Spokesperson Sam Elfarra reinforced the importance of the move in an official statement. “Listing TRX on Binance.US marks an important step in expanding access to the TRON ecosystem in the United States,” he said. Elfarra added that regulated platforms play an increasingly central role in digital asset adoption.

He further noted that broader availability of TRX through compliant exchanges supports wider participation. Long-term ecosystem growth, he said, depends on access through trusted and regulated venues. For U.S. investors, this listing removes a common barrier to entering the TRON network.

Advertisement

The addition of TRX/USD and TRX/USDT pairs also gives traders flexible options. Both pairs cater to different user preferences within the Binance.US platform. This dual-pair structure supports smoother trading activity and tighter market depth.

TRON’s Stablecoin and Payment Ecosystem Gets a Boost

TRON is already known as a leading network for stablecoin transactions. USDT issued on the TRC20 standard remains a core part of its ecosystem. The Binance.US listing further connects this infrastructure to regulated U.S. market participants.

Beyond stablecoins, TRON supports payments, decentralized finance, and digital asset settlement. These use cases make TRX a utility-driven token with real network demand behind it. The listing, therefore, reflects more than just exchange availability — it reflects network relevance.

TRON DAO’s announcement also pointed to enhanced CEX-based liquidity as a key outcome. Greater liquidity on regulated platforms typically attracts more institutional and retail interest. Over time, this can contribute to more stable trading conditions for TRX.

Advertisement

As regulated crypto markets continue to mature in the United States, listings like this carry more weight. They signal that a project is working within established frameworks rather than outside them. For TRON, the Binance.US listing adds another layer to its global market strategy.

Source link

Advertisement
Continue Reading

Crypto World

SEC Charges Donald Basile in $16M Crypto Fraud Over “Insured” Token

Published

on

SEC Charges Donald Basile in $16M Crypto Fraud Over “Insured” Token

The US Securities and Exchange Commission has filed a lawsuit against crypto executive Donald Basile, accusing him and two companies he controlled of raising about $16 million from investors through false claims tied to a so-called “insured” crypto token known as Bitcoin Latinum.

In a complaint filed Friday in the US District Court for the Eastern District of New York, the SEC alleged that Basile ran the scheme between March and December 2021 through Monsoon Blockchain Corp. and GIBF GP Inc., offering investors Simple Agreements for Future Tokens (SAFTs) that promised future delivery of the token, according to a report from The Wall Street Journal.

Regulators said hundreds of investors were told the asset was backed and insured, but the SEC alleged no insurance company ever provided coverage or any proof that these claims were true, per the report.

The case marks one of the few SEC enforcement actions under the Trump administration, which has signaled a more crypto-friendly regulatory stance compared to previous administrations.

Advertisement

Related: Crypto market safe harbor lands at White House for review

Crypto funds spent on luxury

The SEC said Basile repeatedly represented that Bitcoin Latinum was an insured, asset-backed cryptocurrency and that investor funds would help support its underlying value. Instead, the complaint alleges, millions of dollars were diverted to personal spending, including real estate purchases, credit card payments and the acquisition of a $160,000 horse.

The regulator is seeking permanent injunctions, repayment of allegedly ill-gotten gains with interest, civil penalties, and a ban on Basile’s participation in securities offerings, according to the WSJ. It also wants an officer-and-director bar preventing him from leading public companies in the future.

The Bitcoin Latinum website currently shows a 404 error.

Advertisement
Bitcoin Latinum website not working. Source: Bitcoin Latinum

Related: SEC proposes certain crypto interfaces don’t need to register as brokers

SEC criticizes past crypto cases for lacking benefit

Last week, the SEC said many past enforcement actions against crypto firms did not directly benefit investors and reflected a focus on case volume rather than meaningful protection. The agency reported that since fiscal 2022 it brought 95 actions and collected $2.3 billion in penalties for “book-and-record” violations, but several cases involving crypto registration and dealer definitions did not identify clear investor harm.

The SEC also said this approach reflected a misinterpretation of securities laws and a misallocation of enforcement resources. Under Chair Paul Atkins, appointed in 2025, the agency says it has moved away from “regulation by enforcement” and is now prioritizing fraud, market manipulation and serious abuses of trust.

Magazine: Your guide to surviving this mini-crypto winter