Mission: Impossible in the hardware wallet world: Ledger admits that devices sold by Southeast Asian reseller CryptoBilis had a spy chip hidden inside. During setup, all 24 recovery words were sent out via a cellular module—the secure element was never touched. On-chain estimates suggest over 300 wallets were drained of nearly $93 million, and Tether urgently froze $10 million in $USDT. If you bought directly from the official website, you’re fine. If you bought through a reseller, check your device ASAP. Is your cold wallet still cold—or toast?