KriptoBR

🚨 @DonjonLedger has struck again discovering a MediaTek vulnerability potentially impacting millions of Android phones. Another reminder that smartphones aren’t built for security. Even when powered off, user data - including pins & seeds - can be extracted in under a minute.

I am reporting an unauthorized withdrawal of approximately 30,000 USDC from my Ledger-secured wallet. The wallet was protected by a @Ledger hardware device. The recovery phrase (private keys) has never been shared, digitized, photographed, typed, or exposed to any third party. The Ledger device itself is used exclusively on a dedicated MacBook (Apple M4), which was purchased fresh and is used only for Ledger transactions. This laptop is not used for browsing, downloads, third-party wallet connections, or any other activity unrelated to Ledger. The @Ledger device is not used on any other computer. It has not been connected to any unknown software, websites, or external wallet interfaces. I have not opened or used the Ledger wallet for several weeks prior to discovering the incident. I did not initiate, confirm, or sign any transaction authorizing this withdrawal. Upon reviewing the blockchain transaction history, I discovered that approximately 30,000 USDC was transferred out of my wallet without my knowledge or authorization. The funds were subsequently sent to Bitget. I am 100% certain that: The recovery phrase has never been exposed. No transaction was manually confirmed by me. No third party has had physical access to the Ledger device. The dedicated MacBook has not been used for any other crypto-related activity outside Ledger. This withdrawal was not authorized by me in any form, and I require a full explanation as to how such a transaction could have been executed under these conditions. HELP