Hardware wallets are being targeted too! Ledger confirms unauthorized hardware implant found in a device
Many people buy hardware wallets to “keep their assets in their own hands.”
But this incident is a reminder to all users:
The first step in self-custody is making sure the device itself is trustworthy.
Ledger confirmed that, while investigating wallet thefts linked to CryptoBilis, it found an unauthorized hardware implant inside a device belonging to an affected user.
What we know so far:
The issue involves some devices sold through CryptoBilis
CryptoBilis has suspended all hardware wallet sales and shipments
Ledger says there is currently no evidence that its systems, services, or security infrastructure were compromised
Affected users have been advised not to initialize unused devices. Those who have already used their devices should consider moving their assets to a new one.
The biggest lesson from this incident:
Blockchain security isn’t just about protecting private keys.
Until now, people have focused on questions like:
Have my private keys been exposed?
Have I stored my recovery phrase securely?
Did I sign the wrong transaction?
But this incident brings another question to the forefront:
Can the device supply chain be trusted?
Hardware wallet security depends not only on code, but on every step from production and shipping to delivery into the user’s hands.
For crypto users:
Buy devices through official channels whenever possible
Don’t use secondhand wallets from unknown sources
Never share your recovery phrase with anyone
There are no shortcuts to keeping your assets safe.
True self-custody is a line of defense built from technical security, safe habits, and risk awareness.
#ledgertech #ledger确认用户设备遭植入未授权硬件