Hardware wallet maker Ledger confirmed that one user device purchased from a Southeast Asian reseller contained an unauthorized hardware implant, and an investigator, Specter, estimated related losses across Bitcoin, Ethereum and Tron exceed $86 million. Ledger said the issue appears isolated to that single reseller, CryptoBilis, and its regional market (Indonesia, Malaysia and the Philippines), and that Ledger’s own infrastructure, systems and services were not compromised. CryptoBilis stopped sales of all hardware-wallet inventory while the probe continues, and Ledger is actively communicating with the reseller and contacting affected users as part of the investigation.
Ledger advised anyone who bought a device from that reseller to avoid initiating setup; users who already set up a Ledger device should move assets to a new Ledger signer or create a new seed. Ledger asked people with relevant information to contact its bounty program and directed users to official customer-support channels for assistance. The company has not disclosed how many customers were affected or the definitive total of stolen funds, and the investigation remains ongoing.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Michael Smith was sentenced to 18 months for using AI and thousands of bots to flood music streaming platforms with fake plays, earning him over $8 million in royalties. This case is the first DOJ prosecution involving AI-assisted music streaming fraud. (nytimes.com)
AI models can embed encrypted backdoors that hide arbitrary capabilities, making them provably difficult to elicit even with full access to model weights. This challenges the reliability of capability evaluations and limits the effectiveness of capability audits. (arxiv.org)
Anthropic has significantly improved defenses against distillation attacks, reducing data theft by 90 to 99 percent. These attacks, which clone AI capabilities without authorization, pose risks to safety and national security, prompting stronger protective measures. (anthropic.com)
Raven, an AI tool developed by Graylark Technologies, enables law enforcement to identify specific homes from interior photos by analyzing features and matching them with data from Zillow and Airbnb. The technology can geolocate interior images across millions of rental units worldwide, raising privacy concerns. (404media.co)
GPT-6 Astra helped jailbreak a Kindle to turn it into a photo slideshow device controlled by an AI agent. The project involved creating custom software to cycle through images and bypass restrictions on the device. (nirajrajgor.com)
Ukrainian strikes on Russian data centers did not eliminate Russian disinformation or bots on social media. The narrative linking the strikes to a reduction in disinformation is false, and the attacks were retaliatory actions unrelated to disinformation efforts. (machinesociety.ai)
Today's best Hacker News stories, summarized and screenshotted, one email a day.