Ledger says unauthorized implant found in at least one device sold by CryptoBilis
Ledger confirmed that at least one device linked to user fund losses contained an unauthorized hardware implant. All confirmed cases involve devices sold by Southeast Asian reseller CryptoBilis, which has suspended sales while the investigation continues. Ledger says its own systems and direct sales channels were unaffected and is contacting users and cooperating with authorities. On-chain researchers estimate losses of $86 million to $93 million across more than 300 wallets, though Ledger has not confirmed a total loss. The company advises customers who bought through CryptoBilis not to initialize unused devices and to transfer funds from initialized devices to a new seed on a Ledger device. The incident has prompted a review of reseller controls and supply-chain protections; claims about how the breach occurred remain unverified.
