CryptoBilis Devices Linked to Losses
Ledger says at least one device sold through CryptoBilis, a Malaysia-based reseller serving Southeast Asia, contained an unauthorized hardware implant. The company says the reports of unexpected crypto losses it has investigated so far are linked to devices purchased from the retailer.
Customers Told to Stop Setup
Ledger began investigating on October 9 and asked CryptoBilis to stop selling and shipping its devices. It later advised customers who have not set up a device from the reseller not to do so. Those who have already used one should consider transferring their funds to a new wallet created with a fresh recovery phrase.
Researchers Find Hidden Components
Researchers have reportedly found modified Ledger Nano X devices offered through online marketplaces, sometimes at steep discounts. Analysis by cryptocurrency research group Tibane Labs identified two implant designs. Both included hidden electronic components and an eSIM-based connection that researchers say could transmit information from the device.
Authenticity Checks May Miss Implants
Ledger has not publicly confirmed the exact model or method involved in every reported case. The company says it is working with authorities and contacting affected users. It also warns that its authenticity check may not detect an added implant if the device’s original security chip remains intact.
Buy From Authorized Sellers
Ledger recommends buying devices only through authorized channels. It has not reported evidence that other resellers are involved, but the incident has raised concerns about risks in the hardware-wallet supply chain.