Key Takeaways
Ledger confirmed an unauthorized hardware implant in a wallet from reseller CryptoBilis, advising buyers not to initialize devices and to move assets if already set up.
According to BlockchainReporter, Ledger has confirmed that a device involved in its Southeast Asia wallet-drain probe contained an unauthorized hardware implant. This marks the first time the hardware-wallet maker has verified physical tampering in an investigation tied to devices sold through CryptoBilis, a reseller for Indonesia, Malaysia, and the Philippines. Ledger stated that its own security infrastructure and systems were not compromised.
On-chain analysts estimate total losses between $86 million and $93.4 million, though Ledger has not confirmed these figures. Mark Karpelès described a modified Ledger Nano X featuring a concealed circuit board with an LTE module, eSIM, and microcontroller that records recovery phrases as they appear on screen without touching the secure element.
Ledger advises buyers who purchased from CryptoBilis in the past 90 days not to initialize unused devices. Those who have already set up a device should move assets to a new wallet using a fresh recovery phrase, treat the device as untrustworthy, and contact support.ledger.com.
Source & Fact-Check Note
https://blockchainreporter.net/ledger-confirms-hardware-implant/
