Ledger confirms hardware wallet spy implant behind crypto thefts
Ledger says the implant captured recovery phrases during setup and sent them over cellular networks, while investigators trace losses to reseller-sold devices.
- Ledger is investigating reports of stolen cryptocurrency from devices sold through Southeast Asian reseller CryptoBilis and asked the retailer to pause sales and shipments. The company confirmed its internal systems remain uncompromised.
- Unauthorized hardware implants inside affected signers capture recovery phrases displayed during wallet setup and transmit the data via LTE cellular connections. The components operate independently without altering the device's Secure Element.
- Estimated losses exceed $86 million, though Ledger has not verified a final total or affected user count. Blockchain researchers traced suspicious addresses across multiple blockchains including Ethereum and TRON.
- Customers who activated CryptoBilis wallets should move assets to new devices initialized with fresh recovery phrases. Those who have not yet set up devices should leave them untouched and contact Ledger Support.
- Researcher Mark Karpel's reported on Friday that spy implants appeared in devices from other authorized resellers, describing the malicious hardware as "made for mass production." This reveals recurring supply-chain vulnerabilities across the hardware wallet industry.
161 Articles
161 Articles
Over 300 wallets violated; investigation points as suspicious to one of the dealers authorized to sell their products in Malaysia, Indonesia and the Philippines
Ledger unveils $849 device built to protect your phone
Your phone can hold your money, private messages, passwords and AI assistants that act on your behalf. That is convenient until something gets access that shouldn’t. Ledger’s answer is Ledger Atom, a security device designed to protect sensitive digital activity while still running everyday apps. Announced in Paris on October 15, the device combines Android’s […] Read the original article here: Ledger unveils $849 device built to protect your ph…
In the age of AI agentique, the French digital asset security champion launches Atom, a device that allows Android applications to be used while securing critical operations.
Components have been added to steal passwords from an unknown number of Ledger Nano X wallets, marketed by a reseller in Southeast Asia.
Coverage Details
Bias Distribution
- 58% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
