Skip to main content
See every side of every news story
Published • loading... • Updated

Ledger confirms hardware wallet spy implant behind crypto thefts

Ledger said the implant read recovery phrases during setup and transmitted them over LTE, while confirmed losses were tied to one Southeast Asian reseller.

  • On October 9, Ledger began investigating reports of stolen funds from users in Southeast Asia who purchased devices through reseller CryptoBilis, confirming an unauthorized hardware implant captured recovery phrases during setup.
  • Ledger's Donjon security team found the implant sits inside the device casing, reading data displayed on the screen to transmit 24-word recovery phrases over LTE, while leaving the Secure Element untouched.
  • Independent researchers estimate losses above $86 million, though Ledger has not verified these figures; the manufacturer advises recent buyers not to initialize their devices and to contact support.
  • CryptoBilis suspended all sales and shipments of Ledger devices while the investigation continues; Ledger confirmed its internal systems and direct sales channels remain uncompromised.
  • Supply chain vulnerabilities remain a recurring challenge for hardware wallet providers; separately, Ledger unveiled its $849 Atom device on October 15, featuring an 'active shield' to detect physical tampering.
Insights by Ground AI
Podcasts & Opinions

150 Articles

Lean Right

In the age of AI agentique, the French digital asset security champion launches Atom, a device that allows Android applications to be used while securing critical operations.

·Paris, France
Read Full Article
Lean Left

Components have been added to steal passwords from an unknown number of Ledger Nano X wallets, marketed by a reseller in Southeast Asia.

Read Full Article
Lean Left

For a long time, a storage method for cryptovalues was considered quite safe: hardware wallets. Now an elaborate attack is causing a stir, more than 100 million dollars are missing. The shock waves range up to Saturn and MediaMarkt.

·Hamburg, Germany
Read Full Article

Manipulated Ledger Wallets are said to have allowed cryptocurrencies to be stolen. A suspected case in Germany has consequences for trade.

·Berlin, Germany
Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 62% of the sources are Center
62% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

TokenPost broke the news on Friday, October 9, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal