Ledger wallet implant exposes a gap in its authenticity check
Ledger confirmed an unauthorized hardware implant in one affected customer’s wallet after customers reported losses tied to devices bought from Southeast Asian reseller CryptoBilis, which has suspended sales during the investigation. Ledger says its own systems were not compromised, and has not established how many devices were modified or whether the implant caused all reported thefts. Separate investigators documented Nano X implants capable of reading recovery phrases from display signals and transmitting them through cellular components, though their specimens were purchased elsewhere and may differ from the reseller-linked device. Estimates of suspected losses range from $91 million across 477 addresses to $93.2 million across 315 wallets. Investigators found coordinated withdrawals, and Tether reportedly froze about $10 million in USDT. Ledger advises customers not to initialize unused reseller devices and to move funds using a new recovery phrase generated on a trusted device.
