They manage to hack a Ledger Nano S, which are supposed to be impossible to hack, but in a very absurd way, by connecting it to a smartphone charger and pressing the buttons on it.

The Titanic was an impossible ship to sink, save for an iceberg. Ledger's USB to store cryptocurrencies, were a secure device impossible to be corrupted, except for a fifteen-year-old boy. Yes, a fifteen-year-old boy has exposed the French company. The most amazing thing of all is that it has not been done by brute force, back door or similar, but has been connected to a charging base for a smartphone, current and mill, I started pressing keys and that's it.

Ledger has developed these special pen drives to store cryptocurrencies, which are impossible for anyone to corrupt, according to the French company. To provide security to these units, the Anonymous Attestion technique or anonymous declaration has been implemented, which develops signatures that are impossible to forge, that can only execute an approved code. Back in 2015 they said that it was not possible for an attacker to replace the firmware and go through the declaration process without the Ledger key being known.

A 15-year-old the UK has dismantled the theory. Seleem Rashid, that's what it's called, has found a kind of back door on the Ledger Nano S, which is priced at $ 100 and has been sold for millions. This technique would also work with Ledger Blue, the most powerful and costing $ 200.

To do this, he has simply connected the Ledger with its cable to any smartphone charger and started pressing the buttons on it. The first attempts do not pass anything, but at the fourth press, it allows you to set a new password, verify it and have access to it without having to know the password.

This vulnerability is very difficult to solve with a firmware update, since the problem would be in the design, specifically, in the way the drivers communicate inside. It remains to be seen what the French company says in the face of this sovereign slap, caused by a 15-year-old boy, who has been given the Ledger to do the test.