The safest hardware wallet may not need to be purchased—a brand-new phone can do the job. The idea is to turn the phone completely into an offline vault: disable Face ID, switch to a mixed password of at least 12 characters, enable Lockdown Mode, and turn on automatic data erasure after 10 incorrect attempts; before installing a wallet, first disable iCloud backups, download the app only from the official website, and verify the publisher; always write the seed phrase by hand on paper or a metal plate, and never take a photo of it. The outcome actually hinges on just two things: if backups aren’t disabled, the seed phrase will be uploaded to the cloud; if you take a photo, you’re effectively handing the key to your photo library. Miss either one, and the previous nine steps are all for nothing. Finally, always send a small test transaction first, then disconnect from the internet and remove the SIM card, lock the device in a cabinet, and store the seed phrase elsewhere. $BTC $ETH

#LedgerLossesNear90Million Crypto Wallet Security: The Risks May Begin Before Your First Transaction Hardware wallets are designed to protect digital assets by keeping private keys offline. However, reports published on October 9–10 about suspected cryptocurrency losses linked to devices sold through Southeast Asian reseller CryptoBilis have raised important questions about wallet sourcing, initialization, and recovery-phrase security. According to reported on-chain investigations, estimated losses have approached or exceeded $90 million. Bitquery reportedly identified approximately $92.9 million in suspected losses across 311 wallets. These figures remain investigative estimates, not a final loss total confirmed by Ledger. What Do We Know About the Reported Incident? The reported transactions involve multiple blockchain networks, including Bitcoin, Ethereum, TRON, BNB Chain, and Polygon. Ledger reportedly asked CryptoBilis to pause sales and shipments while it investigates customer reports associated with devices purchased through the distributor. Investigators have also reported that approximately $10 million in USDT linked to the incident was frozen by Tether. While this may help limit the movement of certain assets, freezing funds does not guarantee that affected customers will recover their money. The precise cause, the number of affected users, and the final recoverable amount remain uncertain. Three Security Lessons Every Crypto Holder Should Understand 1. Wallet security starts with trusted sourcing. A recognized brand name is not a substitute for verifying where a device comes from. Purchasing directly from the manufacturer or an authorized seller can reduce supply-chain risks, although it cannot eliminate every possible threat. 2. Your recovery phrase controls access to your assets. Your recovery phrase is one of the most sensitive pieces of information in your entire crypto setup. Never share it with customer support, enter it into an unsolicited website, or trust a stranger who claims it is required to verify your wallet. Always generate your phrase privately during the official setup process. Never trust a recovery phrase supplied with a device. 3. Blockchain transparency helps investigations, but it cannot guarantee recovery. Public blockchain records can help investigators trace suspicious transactions. Certain stablecoin issuers may also be able to freeze eligible tokens. However, tracing assets, freezing tokens, and returning funds to victims are three different things. Practical Steps to Protect Your Assets - Buy hardware wallets directly from the manufacturer or a verified seller. - If you purchased a Ledger device through CryptoBilis recently, consult Ledger's official security guidance before using it. - Follow the manufacturer's instructions if your device may be affected. - If your recovery phrase may have been exposed, use a trusted, secure environment to transfer remaining assets to a properly initialized wallet with a newly generated recovery phrase. - Update wallet software and firmware through official channels. - Verify transaction details on your hardware device before approving transfers. - Never reuse a recovery phrase that may have been compromised. The Bigger Picture Self-custody gives users greater control over their digital assets, but it also places responsibility for key protection in their hands. Security depends on more than buying a device from a familiar brand. It also involves trusted sourcing, secure initialization, recovery-phrase protection, and careful transaction verification. This developing case is a reminder that protecting crypto assets requires a complete security process, not just a piece of hardware. My Takeaway: In crypto, prevention is often more effective than attempting recovery after funds have moved. Verify your device, protect your keys, follow official security updates, and never let convenience replace caution. #CryptoSecurity #Ledger #GateSquare

If I hadn’t enabled automatic syncing back then, I’d probably be going blind digging through on-chain records from three months ago right now. I tried manually exporting CSVs before, but OP and Arb used inconsistent formats. The Gas fee column was sometimes in ETH and sometimes in USD, and halfway through organizing everything I wanted to throw my computer out the window. I’ve learned my lesson now and regularly run everything through a script. The Layer2s can argue all they want—my records need to stay alive first. Put simply, social recovery wallets can save your private keys, but they can’t save your Excel spreadsheet. That’s all for now.