Ledger Confirms a Hardware Wallet Was Physically Tampered With Before It Ever Reached a User 🔒
October 10. Ledger Support confirmed that one device belonging to a user affected by the CryptoBilis incident contained an "unauthorized hardware implant." The device was sold through CryptoBilis, a Southeast Asian reseller, and the discovery came from Ledger's own investigation into a wider pattern of reported crypto losses among its customers. Ledger says it is contacting affected users directly and cooperating with law enforcement.
Here is the distinction worth holding onto carefully. This confirms physical tampering happened to at least one real device. It does not confirm that tampering caused all, or even most, of the reported losses. Multiple outlets covering this same investigation cite different total figures, $86 million from CryptoTimes and Coinedition, $93.4 million from Bitcoin News, both describing the same CryptoBilis case. That gap itself tells you the full scope is still being worked out, not finalized.
Ledger states its own core infrastructure, systems, and services show no signs of compromise. This is being treated as a supply chain problem at the reseller level, not a breach of Ledger's own operations.
CryptoBilis has suspended all hardware wallet sales during the investigation. Ledger's guidance is direct, if you bought a device from this reseller and have not set it up, do not begin. If you already have, move your assets to a new device with a freshly generated recovery phrase.
One reminder worth repeating plainly, because scammers move fast on news like this. Ledger will never ask for your 24 word recovery phrase. Nobody legitimate ever will.
#LedgerConfirmsUnauthorizedHardwareImplantInUserDevice
$BTC
October 10. Ledger Support confirmed that one device belonging to a user affected by the CryptoBilis incident contained an "unauthorized hardware implant." The device was sold through CryptoBilis, a Southeast Asian reseller, and the discovery came from Ledger's own investigation into a wider pattern of reported crypto losses among its customers. Ledger says it is contacting affected users directly and cooperating with law enforcement.
Here is the distinction worth holding onto carefully. This confirms physical tampering happened to at least one real device. It does not confirm that tampering caused all, or even most, of the reported losses. Multiple outlets covering this same investigation cite different total figures, $86 million from CryptoTimes and Coinedition, $93.4 million from Bitcoin News, both describing the same CryptoBilis case. That gap itself tells you the full scope is still being worked out, not finalized.
Ledger states its own core infrastructure, systems, and services show no signs of compromise. This is being treated as a supply chain problem at the reseller level, not a breach of Ledger's own operations.
CryptoBilis has suspended all hardware wallet sales during the investigation. Ledger's guidance is direct, if you bought a device from this reseller and have not set it up, do not begin. If you already have, move your assets to a new device with a freshly generated recovery phrase.
One reminder worth repeating plainly, because scammers move fast on news like this. Ledger will never ask for your 24 word recovery phrase. Nobody legitimate ever will.
#LedgerConfirmsUnauthorizedHardwareImplantInUserDevice
$BTC