Ledger confirms hardware wallet spy implant behind crypto thefts
Ledger said the implant could capture recovery phrases during setup and transmit them over cellular networks, while retailers paused sales amid the probe.
- On October 9, Ledger began investigating a supply-chain attack involving modified devices sold by Southeast Asian reseller CryptoBilis, confirming attackers inserted hardware implants to steal 24-word recovery phrases during wallet setup.
- Ledger's Donjon security team found the implants use a microcontroller and embedded cellular connection to transmit recovery phrases without altering the device's Secure Element or operating system, allowing attackers to bypass normal security.
- Onchain researchers estimate stolen funds range from $93.2 million to $103.4 million across multiple blockchains, though Ledger has not verified the total. The company requested CryptoBilis pause all sales and shipments as a precaution.
- Ledger instructed customers who purchased devices from CryptoBilis within the past 90 days not to initialize them and urged those who already activated devices to transfer assets to a new signer with a fresh recovery phrase.
- On October 15, 2026, Ledger introduced new security requirements for authorized retailers to prevent future supply-chain tampering and continues collaborating with law enforcement to trace stolen funds and review distribution controls.
155 Articles
155 Articles
Ledger unveils $849 device built to protect your phone
Your phone can hold your money, private messages, passwords and AI assistants that act on your behalf. That is convenient until something gets access that shouldn’t. Ledger’s answer is Ledger Atom, a security device designed to protect sensitive digital activity while still running everyday apps. Announced in Paris on October 15, the device combines Android’s […] Read the original article here: Ledger unveils $849 device built to protect your ph…
In the age of AI agentique, the French digital asset security champion launches Atom, a device that allows Android applications to be used while securing critical operations.
Components have been added to steal passwords from an unknown number of Ledger Nano X wallets, marketed by a reseller in Southeast Asia.
For a long time, a storage method for cryptovalues was considered quite safe: hardware wallets. Now an elaborate attack is causing a stir, more than 100 million dollars are missing. The shock waves range up to Saturn and MediaMarkt.
Manipulated Ledger Wallets are said to have allowed cryptocurrencies to be stolen. A suspected case in Germany has consequences for trade.
Coverage Details
Bias Distribution
- 62% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
