Hardware wallet provider Ledger experienced a security breach on its official Discord server on May 11, 2025, when a hacker compromised a contracted moderator's account. The attacker used this access to deploy a malicious bot that posted phishing links aimed at tricking users into revealing their seed (recovery) phrases on a fraudulent third-party website.
The scam messages falsely claimed a newly discovered vulnerability in Ledger’s systems and urged users to verify their recovery phrases, which would give the attacker full control over their wallets.
Ledger's security team responded swiftly by removing the compromised moderator account, deleting the malicious bot, reporting the scam website, and reviewing and securing all relevant server permissions.
Despite some users being banned or muted by the attacker when trying to warn others, Ledger contained the incident quickly and restored control of the Discord server.
Ledger emphasized to its community never to enter recovery phrases or connect wallets through links shared on Discord or any other unofficial channels. The scam site was taken down shortly after the incident. Ledger also announced that additional security measures have been implemented to prevent similar breaches in the future.
This attack follows a pattern of targeted phishing attempts against Ledger users, including recent scams involving official-looking physical letters sent to customers requesting seed phrase verification, likely exploiting data from a 2020 Ledger data breach. The incident highlights ongoing risks in crypto community platforms and the importance of robust security practices.
Ledger has successfully secured its Discord server after the hack, mitigated the phishing attempt, and strengthened its security protocols to protect its users from such threats going forward.
It's me, @justmythoughts, an ordinary Hive user looking to make the most of the platform. I will appreciate your support. Follow me for more. Thanks, Gracias :)
