Ledger’s official Discord server faced a security breach on May 11 after a moderator’s account was hacked. The attacker used the compromised account to post fake links, asking users to verify their seed phrases on a third-party site, putting their funds at serious risk.
A bot, controlled through the hacked account, sent out scam messages claiming there was a new vulnerability in Ledger’s system. It told users to urgently verify their wallet recovery phrases through a link, which actually led to a phishing site.
Some users who noticed the scam tried to speak up, but the hacker used moderator powers to mute or ban them, which probably slowed down how quickly Ledger could respond.
Once the team caught on, they stepped in—removed the hacked account, got rid of the bot, reported the fake site, and double-checked all server permissions to lock things down.
Quintin Boatwright from Ledger confirmed that the situation was handled quickly and called it an isolated case.
Ledger says it has now added extra protections to prevent something like this from happening again.
Not the First Time Scammers Targeted Ledger Users
This isn’t the only scam targeting Ledger customers lately.
Just last month, some users received physical letters pretending to be from Ledger. These letters used the company’s real logo and address and asked people to scan a QR code and enter their seed phrases.
One user who got the letter guessed that the scammers could’ve been using old leaked customer data from Ledger’s 2020 data breach.
That breach exposed names, phone numbers, and home addresses of over 270,000 Ledger customers. A year later, some people even received fake Ledger devices in the mail—devices that were tampered with to install malware when connected.
What Now?
It’s not clear if anyone actually lost money in the Discord scam. Cointelegraph has reached out to Ledger, but there has been no public update yet.
Just a reminder: never share your recovery phrase, no matter where the request comes from. Not on Discord. Not by email. Not even through a letter.
And especially not when someone’s pretending it’s urgent.
Also Read: Lido Triggers Emergency Vote After 1 Oracle Key Gets Compromised
