Ledger Confirms Unauthorized Implant in Hardware Wallets Sold by CryptoBilis
- Ledger confirmed that a device linked to recent user fund losses had an unauthorized hardware implant.
- All confirmed cases involve products distributed through the Southeast Asian reseller CryptoBilis.
- The company is contacting affected users and has reported that CryptoBilis suspended all hardware wallet sales.
- As of Oct. 11, Ledger stated that the volume of impacted devices appears limited to those sold through CryptoBilis.
- The incident first came to light on Oct. 9, when users reported missing funds after purchasing devices from CryptoBilis.
This situation highlights potential supply-chain vulnerabilities within hardware wallets, as the unauthorized implant marks a significant breach of security protocols. Ledger’s internal systems and direct sales channels reportedly remain unaffected, indicating a targeted issue with specific resellers.
The confirmation of an unauthorized implant in devices sold by CryptoBilis underscores the importance of secure supply chains in cryptocurrency hardware wallets.
