Ledger Identifies Unauthorized Hardware Implants in Wallets
- Ledger’s Donjon security team discovered unauthorized hardware implants in wallets sold by Southeast Asian reseller CryptoBilis.
- The implant captures the device’s recovery phrase during setup and transmits it over LTE using a provisioned eSIM.
- More than $86 million in suspected thefts have been traced across Ethereum, Tron, and Bitcoin.
- CryptoBilis has stopped selling Ledger devices while the investigation is ongoing.
- Ledger is reviewing reports of similar implants in other devices and locations.
The discovery of unauthorized hardware implants in Ledger wallets sold by CryptoBilis highlights significant security vulnerabilities, with over $86 million potentially affected across major cryptocurrencies like Ethereum and Bitcoin. Users are advised to contact Ledger Support if they suspect their device is compromised.
This incident underscores the importance of purchasing hardware wallets from trusted sources to prevent potential security breaches that could lead to substantial financial losses for cryptocurrency holders. Source
