How a Discord Hack Almost Ruined Ledger’s Reputation—Until They Fixed It (Kind of)

by

Oh, what a day for Ledger! The infamous hardware wallet provider, known for its solid reputation, found itself embroiled in a bit of a mess on May 11. A hacker bot had a jolly good time after compromising a moderator’s account and posting scam links in the official Discord server, all in an attempt to trick unsuspecting users into spilling their precious seed phrases. A real masterpiece of digital villainy!

“One of our contracted moderators had their account compromised, which allowed a malicious bot to post scam links in one channel,” explained Quintin Boatwright, Ledger’s resident fixer-upper, on the server.

“But fear not, dear users! The situation was swiftly contained. The compromised account was kicked out, the bot sent to the depths of cyberspace, and the website—well, it was reported. Oh, and we made sure to double-check all relevant permissions, just to be sure. You know, the usual.”

//s3.cointelegraph.com/uploads/2025-05/0196c1da-0056-76dc-8d8b-5457a70e34cf” alt=”Discord Hack Image”/>

It’s unclear whether anyone actually fell for this crafty little scheme—though one can imagine a few wallets might’ve been emptied. CryptoMoon reached out to Ledger for a comment, but as always, they seem to be busy keeping everything together behind the scenes.

Just When You Thought It Couldn’t Get Worse… Ledger Scammers Started Sending *Letters* Last Month

And if you thought this was the end of Ledger’s woes, think again! Back in April, scammers decided they needed to mix things up and started sending good old-fashioned physical letters to Ledger hardware wallet owners. How quaint! The letters, featuring Ledger’s logo and business address, asked users to validate their private seed phrases by scanning a QR code. How *convenient* for those scam artists!

One sharp-eyed Ledger user speculated that these letters were targeting folks whose data was leaked during the infamous breach of July 2020, when over 270,000 customer records, including names, phone numbers, and home addresses, were spilled online. Just a bit of fun trivia for you there, dear reader! 😬

As if that wasn’t enough, a year later, several Ledger users claimed to have received tampered devices—those that, upon use, would gladly introduce malware into your life. A very warm welcome, indeed, courtesy of Bleeping Computer. Looks like scammers know how to send a message—and a virus.

Read More

2025-05-12 03:48