Ledger has directed resellers and distributors in Southeast Asia and Hong Kong to stop selling its hardware wallets and pull them from shelves while it investigates implanted chips found in devices sold by reseller CryptoBilis. The company's Donjon security team found a hidden microcontroller that reads recovery phrases and transmits them over LTE via an embedded eSIM, bypassing Ledger's normal integrity checks. Similar tampered units have also been reported from other sellers in Asia and Europe, including a Singapore airport retailer and MediaMarkt in Europe, which has already removed the product.
bleepingcomputer.com
· 2026-10-14
Ledger has confirmed that at least one of its hardware wallets, sold through Malaysia-based reseller CryptoBilis, contained an unauthorized hardware implant that drained users' cryptocurrency funds. The company asked CryptoBilis to halt sales and shipments on October 9, and a day later confirmed the tampering, saying it is contacting affected users and working with authorities to find those responsible. Ledger says all reported fund losses trace back to devices from this one reseller and describes the scale of the breach as limited.
bleepingcomputer.com
· 2026-10-12
Ledger said its October 10 investigation into reported crypto thefts tied to Southeast Asian reseller CryptoBilis uncovered an unauthorized hardware implant inside one affected customer's wallet. CryptoBilis has suspended sales of all hardware wallets while Ledger works with authorities and contacts other impacted users. Researcher Mark Karpelès separately reported finding suspicious electronics behind the screen of a Ledger Nano X in Malaysia, while blockchain analytics firm Bitquery estimated losses of $92.9 million across 311 wallets, a figure Ledger has not independently confirmed.
crypto.news
· 2026-10-12
GoKawiil