Ledger asks sellers across Asia to halt sales after supply-chain attack

Ledger discovered hardware implants in cryptocurrency wallets sold by reseller CryptoBilis, which were modified to steal 24-word recovery phrases and transmit them via LTE using a provisioned eSIM. The implant operates as a separate component that does not alter the Secure Element or Ledger OS, making it undetectable by Ledger's self-checks. Ledger has instructed resellers across Southeast Asia and Hong Kong to halt sales while investigations continue, and users have reported compromised devices from other retailers including Metapod and MediaMarkt.

AI-extracted · verify before operational use