Hackers aren't going to use Recover to rob people. They're going to find exploits in the code. And since the code is closed source, the only people looking for those exploits are the hackers using AI to reverse engineer it.
The worst attack could be planned by the interns them selves. It requires nothing but cooperation between enough people with the necessary knowledge to plan and launch it. And no body would even know, unless Ledger looks up and finds the 'code implant' on their own. It would be actual 'poison' in the code, unreadable to any of us.
Or one person. Here's an example from the lottery:
A former lottery security official was sentenced to 10 years in prison on Wednesday for rigging a computerized Hot Lotto game in 2010 in an attempt to win a $14 million jackpot in Iowa.
Eddie Tipton inserted a stealth program into the computer that randomly picked the numbers, then deleted it so it could not be detected
SOURCE:
CBS NewsAll it takes is one person. And it's not like Ledger has done a great job of keeping their code secure:
A Ledger employee just got phished. DeFi users lost over $600k
Ledger confirmed the attack was the result of a hacker compromising one of its employees via a phishing attack. After gaining access to Ledgers internal systems, the hacker planted malicious software within the Ledger Connect Kit.
SOURCE:
DLnewsWhy did a former employee still have access to the codebase? Ledger wouldn't say. How many former Ledger employees still have access to their codebase? Ledger won't say, not that anyone could trust any answer they'd give. Do they even know?
