Trezor says it received a credible report that a Safe 5 hardware wallet bought from reseller CryptoBilis in Indonesia contained an extra circuit board with a cellular module, possibly able to read and transmit recovery phrases. The company has not yet examined the device itself but has advised potentially affected customers to move their crypto assets to known-safe wallets. Trezor had already cut ties with CryptoBilis on October 9, 2026 after a similar implant was confirmed in a Ledger device sold by the same reseller.
bleepingcomputer.com
· 2026-10-30
Ledger unveiled Atom, a touchscreen Android device it calls a signer rather than a wallet, at its Op3n event in Paris on October 15. The device separates an Android environment from an isolated Secure Mode for signing transactions, ships with Solana Mobile's Seeker app and dApp Store preinstalled, and will be sold through Ledger's site starting at $849 for a limited Founder's Edition, with regular units priced at $899 and delivery expected in summer 2027.
techreport.com
· 2026-10-17
Ledger has confirmed that some of its hardware crypto wallets were tampered with before reaching customers, using a hidden hardware implant that captured seed phrases and transmitted them to attackers via an eSIM. Ledger traced the compromised devices to a Malaysian reseller, CryptoBilis, and has asked it to halt all sales and shipments while it investigates, saying its own systems and infrastructure appear uncompromised.
futurism.com
· 2026-10-16
MediaMarkt Saturn removed Ledger hardware wallets from its European stores and website on October 13 after a German customer discovered an unauthorized implant inside a device, with no funds lost in that case. Ledger confirmed the retailer pulled the affected products and said the two firms remain in contact. The incident follows an earlier Ledger disclosure on October 10 that devices sold by reseller CryptoBilis in Southeast Asia contained a similar hidden component.
techreport.com
· 2026-10-16
Ledger has announced a new hardware crypto wallet designed to resemble a smartphone. The launch comes as the company faces renewed scrutiny over how it handled earlier reports of backdoored devices, which surfaced months before some crypto wallets were drained of funds.
gizmodo.com
· 2026-10-15
Ledger has introduced the Atom, a device running both Android OS and its own Ledger OS on a secure chip, intended to be used alongside a regular phone rather than replace one. Its eSIM supports data only, not calls or texts, and it includes a partnership with OpenClaw letting AI agents handle financial tasks while requiring physical approval for transactions. Two Atom devices can also exchange encrypted messages decrypted inside Ledger OS.
theverge.com
· 2026-10-15
Ledger has directed resellers and distributors in Southeast Asia and Hong Kong to stop selling its hardware wallets and pull them from shelves while it investigates implanted chips found in devices sold by reseller CryptoBilis. The company's Donjon security team found a hidden microcontroller that reads recovery phrases and transmits them over LTE via an embedded eSIM, bypassing Ledger's normal integrity checks. Similar tampered units have also been reported from other sellers in Asia and Europe, including a Singapore airport retailer and MediaMarkt in Europe, which has already removed the product.
bleepingcomputer.com
· 2026-10-14
Ledger is overhauling its sales and anti-tampering policies following the 'Cryptobilis incident,' in which a physical hardware implant inserted somewhere in its supply chain led to $93 million in stolen crypto from user wallets. The breach, first detected October 9, affected wallets bought through CryptoBilis, an authorized reseller in Malaysia and Southeast Asia, prompting Ledger to halt all sales through that partner.
tomshardware.com
· 2026-10-14
Ledger confirmed that hardware implants planted in some Ledger Nano X wallets sold by Malaysian reseller CryptoBilis allowed attackers to steal roughly $102 million in crypto. Since then, a European buyer and other researchers have reported finding similar implants in Nano X, Flex and Stax devices purchased from a major German electronics chain, suggesting the tampering extends beyond the single reseller Ledger initially named.
zetter-zeroday.com
· 2026-10-14
A vulnerability in the XRP Ledger's payment engine, present for roughly eleven years, could have let an attacker mint about 18 trillion XRP in one transaction by exploiting an integer overflow in balance tracking, according to researcher Cayden Liao and security firm Veria Labs. The XRP Ledger Foundation disclosed the bug on October 9, three days after it was reported through the bug bounty program, and the fix had already shipped on September 25 in xrpld 3.4.1. Developers said they found no evidence the flaw was ever exploited on a live network.
techreport.com
· 2026-10-14
Ledger has acknowledged reports of compromised or tampered devices, sometimes called 'spy implants,' being used to siphon cryptocurrency from users. The company detailed how these devices intercept transactions, and reports indicate the attackers attempted to launder stolen funds using privacy tools like Tornado Cash and Zcash, but did so imperfectly, leaving traceable patterns.
gizmodo.com
· 2026-10-13
Ledger has confirmed that a spy chip implant was responsible for a string of thefts from its crypto hardware wallets. The company has not yet detailed how many users or how much cryptocurrency was affected, or how the implant was introduced into affected devices.
yro.slashdot.org
· 2026-10-13
GoKawiil