Ledger Finds LTE Implant That Stole Recovery Phrases in Suspected $86M Drain
Summary
Ledger says an unauthorized implant was found in a hardware wallet sold by Southeast Asian reseller CryptoBilis. The component reads recovery phrases displayed during setup and transmits them via LTE, potentially allowing attackers to take control of wallets. Ledger has confirmed affected devices and losses only among CryptoBilis sales so far; the number of victims and total losses remain unverified. CryptoBilis has stopped selling the devices. Ledger advises buyers not to set up unused devices and urges users who already used one to transfer funds to a new wallet with a fresh recovery phrase. The company is investigating reports of implants elsewhere.
