🚨 Your hardware wallet could be compromised before you even open the box
Ledger is investigating reports of stolen crypto linked to devices purchased from CryptoBilis, a reseller serving customers in Southeast Asia
The latest development is especially concerning
$BTC
🔍 Ledger has confirmed an unauthorized hardware implant inside at least one affected user's device
But investigators have NOT established that this implant explains every reported theft
On-chain researchers have traced more than $86M in suspected losses, although the total remains unverified
⚠️ Ledger has asked CryptoBilis to suspend sales and shipments while the investigation continues
If you bought a Ledger from CryptoBilis within the 90 days before October 9, here's what matters
If the device is still unopened or not configured, don't initialize it yet
If you've already set it up, Ledger advises considering a move to a trusted new signing device with a freshly generated recovery phrase
Never reuse a potentially compromised recovery phrase for the new wallet
And never enter your recovery phrase into a website or give it to someone claiming to be support
$ETH
🔐 This is a supply-chain security warning, not evidence that every Ledger wallet is compromised
A hardware wallet can protect your keys from online attacks
But that protection depends on the device being trustworthy before it ever reaches your hands
#Ledger #CryptoSecurity
Ledger is investigating reports of stolen crypto linked to devices purchased from CryptoBilis, a reseller serving customers in Southeast Asia
The latest development is especially concerning
$BTC
🔍 Ledger has confirmed an unauthorized hardware implant inside at least one affected user's device
But investigators have NOT established that this implant explains every reported theft
On-chain researchers have traced more than $86M in suspected losses, although the total remains unverified
⚠️ Ledger has asked CryptoBilis to suspend sales and shipments while the investigation continues
If you bought a Ledger from CryptoBilis within the 90 days before October 9, here's what matters
If the device is still unopened or not configured, don't initialize it yet
If you've already set it up, Ledger advises considering a move to a trusted new signing device with a freshly generated recovery phrase
Never reuse a potentially compromised recovery phrase for the new wallet
And never enter your recovery phrase into a website or give it to someone claiming to be support
$ETH
🔐 This is a supply-chain security warning, not evidence that every Ledger wallet is compromised
A hardware wallet can protect your keys from online attacks
But that protection depends on the device being trustworthy before it ever reaches your hands
#Ledger #CryptoSecurity