Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Ledger has identified an unauthorized hardware implant in at least one Ledger device sold through the reseller CryptoBilis, leading to theft of cryptocurrency funds exceeding $86 million from affected users in Southeast Asia. The compromised devices were tampered with, potentially including pre-generated recovery phrases or hardware modifications, allowing attackers to access user wallets. Ledger is warning users who purchased from CryptoBilis in the last 90 days to avoid setting up their devices and to move assets to a new Ledger signer if they already set up the device. The incident highlights supply chain risks from unauthorized resellers, and Ledger is investigating the scope with CryptoBilis having paused all hardware wallet sales.

AI-extracted · verify before operational use