Ledger confirms hardware wallet spy implant behind crypto thefts
Ledger said the device implant could capture recovery words during setup, while researchers estimated losses above $86 million from hundreds of wallets.
- On Tuesday, Ledger confirmed that an unauthorized hardware implant in devices sold by Southeast Asian reseller CryptoBilis captures users' 24-word recovery phrases and transmits them over LTE networks using an embedded SIM.
- The incident surfaced Friday after cryptocurrency losses were reported involving Ledger devices purchased through CryptoBilis, which operated as an authorized reseller in Indonesia, Malaysia, and the Philippines.
- Inside the device casing, the implant monitors information displayed on the screen during setup, though Ledger stated it does not modify the Secure Element, the chip responsible for protecting private keys.
- CryptoBilis suspended all sales following the findings, while OneKey and Trezor terminated their reseller authorization agreements; blockchain analytics firms estimate potential cryptocurrency thefts range from $86 million to $103 million.
- Customers who purchased signers through CryptoBilis were advised to contact Ledger Support and avoid initializing devices, as the company continues examining hardware and has not verified reports of tampered devices from other channels.
131 Articles
131 Articles
Manipulated Ledger Wallets are said to have allowed cryptocurrencies to be stolen. A suspected case in Germany has consequences for trade.
Ledger to Review Sale Policies After Crypto Spyware Attack
Crypto hardware maker Ledger SAS is reviewing its policies and processes for how its devices are sold to consumers, after spyware implanted in some wallets led to an estimated $90 million in stolen cryptocurrency.
Ledger's Hardware Nightmare: Spy Implants in Reseller Wallets Drain Millions
Ledger confirmed an unauthorized hardware implant in a device sold via Southeast Asian reseller CryptoBilis, linked to $86-93 million in crypto thefts. The spy chip captured seed phrases during setup and transmitted them wirelessly. Reports suggest tampering may extend beyond the original reseller to Europe and elsewhere. Users must treat affected seeds as compromised and migrate funds to new devices.
Crypto. Criminals have installed spy boards in Ledger devices that were sold by a Malaysian dealer. Why this also causes uncertainty in Austria.
Coverage Details
Bias Distribution
- 68% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
