๐ A real Ledger, a real boxโฆ and your 24 words still end up with a thief. Itโs not the wallet that was hacked: itโs the route between the factory and you.
๐ The facts (Ledger, Oct. 13โ15, 2026)
โข Criminals bought genuine Ledgers, opened them, and hid a tiny chip inside
โข They were resold through distributors, including CryptoBilis (Malaysia)
โข During setup, the chip reads the 24 recovery words displayed on the screen and sends them over a mobile network (eSIM)
โข Wallets were drained on Oct. 9; losses topped $86M according to analysts (Straits Times), a figure Ledger has not confirmed
โข Sales suspended in Southeast Asia and Hong Kong; MediaMarkt removes Ledger from its shelves in Europe
๐ง How it works
Ledgerโs secure chip and software werenโt cracked. The implant is beside them: it simply copies what you see. So authenticity checks still pass. Whoever has your 24 words has your funds.
โ๏ธ The nuance
โข Ledger says its servers and direct sales are secure
โข All confirmed losses came from CryptoBilis devices
โข Trezor is also reducing its distributors (contracts end on Jan. 1, 2027)
๐ค Fatou, in Dakar, found a โnewโ Ledger for less in a Facebook group. She wanted to store her
$BTC and her USDT on it. The low price is exactly the trap: she doesnโt know who opened the box before her.
โ
Buy from the manufacturer or an authorized reseller. Never buy secondhand, and never use a recovery phrase thatโs already been written down. In doubt? New device, new phrase.
Where did you buy your wallet? ๐
Not financial advice. DYOR.
Sources: Ledger, The Block, BleepingComputer, Straits Times.
#Crypto #Sรฉcuritรฉ #Ledger #Africa