# Ledger Issues 72-Hour Update on CryptoBilis Hardware Implant Investigation

Hardware wallet manufacturer Ledger (@Ledger) has officially issued its 72-hour security update regarding the ongoing investigation into third-party reseller CryptoBilis.

### 🔍 Key Findings from the Official 72-Hour Advisory:

- Active Law Enforcement Probe: Official distributor CryptoBilis is under active investigation by law enforcement authorities regarding suspected physical hardware implants and tampering.

- Scope of Impact: Ledger confirms that the number of potentially affected devices remains 'limited' to specific distribution batches.

- Root-of-Trust Attestation: Ledger stresses that cryptographic root attestation in the Secure Element is designed to detect rogue firmware, but physical implants can manipulate user input/display environments prior to signing.

### 🛡️ Immediate Security Protocol for Cold Storage Users ( / ):

1. Audit Your Purchase Origin: If you acquired any hardware wallet unit through CryptoBilis or secondary unauthorized marketplaces, consider the device compromised.

2. Immediate Asset Evacuation: Transfer cold storage assets (, , ERC-20 tokens) to a verified temporary address or multi-signature vault.

3. Seed Phrase Hygiene: Never enter your 24-word recovery phrase onto any digital screen or compromised physical backup.

Official Source: Ledger 72-Hour Security Advisory (https://x.com/Ledger/status/2109331538072494364)