Thoughts on the growing Ledger supply chain incident and security today: It's a coincidence that this came to light so soon after the Coldcard incident, and doesn't look great for hardware wallets (even though this one doesn't appear to be Ledger's fault). It's not a coincidence that security incidents in general are becoming more frequent in our industry and others. The bad actors now have better tools than ever to try to steal your money. They can trivially look for software vulnerabilities with AI. They have mountains of data about you from a decade+ of unavoidable (for you) data leaks that helps them trick you with social engineering. And the value secured is juicy enough to attempt sophisticated supply chain attacks, because now we've seen that a successful attack on a random reseller can result in $100M+ stolen. As regulations encourage more assets to be tokenized and the value of the whole ecosystem grows in general, we should expect more attention from sophisticated bad actors. And we should also expect that there will continue to be vulnerabilities - whether that is in a hardware wallet or at a custodian. This isn't only a problem in the crypto world either. It already affects traditional financial accounts in similar ways, and will probably get even wilder as people start connecting AI to their accounts. The only answer is for you to assume things will be compromised and protect yourself accordingly by distributing your risk and eliminating single points of failure. This is why we built Casa, and we can help you do it right.