A hardware wallet doesn't remove trust. It relocates it.硬件钱包没有消除信任，只是把信任从交易所挪到了供应链——Ledger 被篡改设备事件已致逾 9000 万美元被盗，10月28日又有新加坡用户中招，戳破的正是这个盲点。
Self-custody moves trust from the exchange to the physical supply chain, and that is the blind spot the tampered-Ledger-device case has exposed. Chain analysts estimate over $90 million stolen, including one user who lost 80 bitcoin after enabling the device (BeInCrypto, October 11); most confirmed cases trace to the Malaysian reseller CryptoBilis. On October 28, Singapore's 8world reported at least two local users lost about S$3.5 million from tampered wallets bought in retail stores.
The mechanism is plain. Self-custody frees you from trusting the exchange not to abscond with your money, but hands you another job: trusting that this device wasn't touched before it reached you. Exchange risk is visible (bank runs, freezes, exit scams); supply-chain risk is invisible, hidden in a logistics-and-resale chain you have never inspected. Most people guard the seed phrase religiously while taking it for granted that the box is clean.
Second-order effect: attackers stop breaking the cryptography and go after the retail and resale channel instead, far cheaper than cracking a secure chip. The front line moves to the moment you buy the device.
The strongest counter still holds: for most people a hardware wallet is far safer than leaving coins on an exchange. True. But safer isn't no-need-to-verify. Buy only from the maker's official channel, confirm it's brand-new and uninitialized on opening, and generate the seed on the device yourself; never use a device someone pre-configured.
We'd revise this if the tampering is confirmed at Ledger's own factory-sealing stage rather than in the resale channel, which would move the problem back to the maker.
Research, not investment advice.
据 BeInCrypto 10月11日报道，链上分析师估计这轮针对 Ledger 的被篡改设备攻击，被盗数字资产已超 9000 万美元，其中一名用户在启用设备后损失 80 枚比特币；已确认案例多数来自马来西亚转售商 CryptoBilis，Ledger 称受影响设备数量有限、正在联系受害用户。新加坡 8world 10月28日报道，至少两名本地用户因在门店买到的被篡改钱包，共损失约 350 万。
机制很直白：自我保管把你从『相信交易所不卷款跑路』里解放出来，却让你接手了另一件事——相信这台设备在到你手里之前没被人动过。交易所风险是看得见的（挤兑、冻结、跑路），供应链风险是看不见的，它藏在一条你从没检查过的物流和转售链里。多数人死守助记词保密，却默认了『盒子是干净的』这个前提。
二阶效应：攻击者不再去攻破密码学，而是去攻破零售和转售渠道：这比破解安全芯片便宜太多，于是防线被整体前移到了你买设备的那一刻。
最强反方：对绝大多数人，硬件钱包仍远比把币留在交易所安全，这成立。但『更安全』不等于『不必验证』：只从厂商官方渠道购买、开封即确认全新未激活、助记词必须由设备当场生成，绝不使用任何别人预设好的设备。
会推翻这个判断的事实：若查实被篡改发生在 Ledger 原厂封装环节、而非转售渠道，那问题就从供应链本身转回了厂商。
研究，不构成投资建议。
Sources来源
Add WAKENEX as a preferred source on Google在 Google 把 WAKENEX 设为首选来源
READ NEXT接着读
Google's Multi-Party Compute buys stronger key security at one new dependence.谷歌的 Multi-Party Compute 用更强的密钥安全，换来一项新的依赖。
Your coins now move only when Google's cloud agrees to sign. That is the trade worth seeing.
你的币，从此只有在谷歌的云同意签名时才动得了。这就是值得看清的那笔交易。
Open note阅读短评
Most-used on OpenRouter is a price signal, not proof of capability.在 OpenRouter 上用量第一，是价格信号，不是能力的证明。
As of October 27, DeepSeek routes about 46% of the tokens developers send through OpenRouter, more than OpenAI (~12%) and Google (~5%) combined, and the platform's top two models are both the cheap DeepSeek V4.1 Flash variant. The easy read is that DeepSeek is winning the model race. The ranking says something narrower.
截至 10 月 27 日，开发者通过 OpenRouter 发送的 token 里，约 46% 流向 DeepSeek，超过 OpenAI（约 12%）和 Google（约 5%）两家之和；平台排名前两位的，都是便宜的 DeepSeek V4.1 Flash 版本。顺手的读法是『DeepSeek 正在赢下模型竞赛』。但这个排名说的是更窄的一件事。
Open note阅读短评
The Fed's 10-2 hold isn't a verdict that inflation is beaten.美联储 10 比 2 的按兵不动，并不是通胀已被制服的判决。
It's a divided committee buying time. The Committee kept the funds rate at 3.75%-4% while its own statement admits inflation "remains elevated," and two of twelve voters, Lisa Cook and Beth Hammack, pushed to hike another quarter point instead.
它只是一个意见分裂的委员会在拖延时间。委员会把联邦基金利率维持在 3.75% 到 4% 的区间，而它自己的声明却承认通胀『仍然偏高』；十二位票委中有两位——丽莎·库克（Lisa Cook）和贝丝·哈马克（Beth Hammack）——主张应当再加息四分之一个百分点。
Open note阅读短评