Ledger Reseller Attack Raises Questions About Hardware Wallet Supply Chains
Summary
Investigators linked at least an estimated $90 million in reported crypto losses to tampered Ledger hardware wallets sold through the CryptoBilis reseller channel in Southeast Asia. Reports say physical implants could capture recovery phrases during setup and send them to attackers. Ledger said its systems were not compromised, asked the reseller to halt sales and shipments, and urged affected customers to avoid initializing suspect devices or move funds using newly generated recovery phrases on trusted equipment. The number of affected devices and total losses remain unconfirmed.
