Ledger Confirms Hardware Implant: Supply-Chain Risk for CryptoBilis-Sourced Devices Escalates to Physical Tampering
Hardware wallet maker Ledger has confirmed that an unauthorized hardware implant was found inside an affected user’s device purchased from Southeast Asian authorized reseller CryptoBilis. The company says its own infrastructure, systems, and services were not compromised, and the incident currently appears to be concentrated at the reseller and in its market.
1. On-chain investigator Specter estimates related losses may exceed $86 million (involving $BTC , $ETH , $TRX , etc.), but Ledger has not yet verified the total amount or the number of affected users.
2. CryptoBilis has suspended all hardware wallet sales and is cooperating with the investigation.
3. Ledger advises users not to unbox and set up CryptoBilis devices that have not been initialized. Users who have already set up their devices should consider moving their assets to a new device using a fresh recovery phrase.
For informational purposes only; this is not investment advice. DYOR. Use official channels only, and don’t click unfamiliar claim links. Never disclose your recovery phrase to anyone.
#Ledger #硬件钱包 #供应链安全 #BTC #ETH
Hardware wallet maker Ledger has confirmed that an unauthorized hardware implant was found inside an affected user’s device purchased from Southeast Asian authorized reseller CryptoBilis. The company says its own infrastructure, systems, and services were not compromised, and the incident currently appears to be concentrated at the reseller and in its market.
1. On-chain investigator Specter estimates related losses may exceed $86 million (involving $BTC , $ETH , $TRX , etc.), but Ledger has not yet verified the total amount or the number of affected users.
2. CryptoBilis has suspended all hardware wallet sales and is cooperating with the investigation.
3. Ledger advises users not to unbox and set up CryptoBilis devices that have not been initialized. Users who have already set up their devices should consider moving their assets to a new device using a fresh recovery phrase.
For informational purposes only; this is not investment advice. DYOR. Use official channels only, and don’t click unfamiliar claim links. Never disclose your recovery phrase to anyone.
#Ledger #硬件钱包 #供应链安全 #BTC #ETH