Trezor Cuts Reseller Network as Ledger Confirms Hardware Implant in CryptoBilis Case

Trezor Cuts Authorized Retailers After Ledger Supply-Chain Attack

Ledger Confirms Tampered Wallets Sold by CryptoBilis Bypass Genuine Check

Bitcoin

This incident underscores the rising threat of software supply chain attacks, which have become more frequent in crypto (e.g., Ledger Connect Kit, Solana's web3.js). While Zod is not crypto-specific, its widespread use in web3 frontends means any compromise could have indirect effects on dApp security and user trust.

A commit to the Zod repository on GitHub is titled 'Zod 4.6.6 malware infection?', raising concerns about a potential malware infection in the Zod library.

Zod GitHub Commit Sparks Malware Fears for Widely Used Validation Library

Zod compromise may be a state-sponsored supply chain attack targeting crypto wallets, not just a random infection

It highlights the growing sophistication of attacks targeting the crypto supply chain, not just exchanges or DeFi protocols. With BTC dominance high and market sentiment greedy, this could accelerate a rotation to safer assets or amplify regulatory scrutiny on hardware wallet manufacturers and resellers.

Ledger hardware wallets

Ledger hardware wallets sold by reseller CryptoBilis were compromised with a hardware implant, leading to an $86 million theft from hundreds of wallets.