Reports have emerged indicating that users of the Ledger cryptocurrency wallet have experienced significant losses, allegedly due to compromised hardware sold by CryptoBillis. In light of these developments, Ledger has requested that CryptoBillis cease all sales of its wallets as an investigation unfolds. The company has confirmed that at least one device belonging to an affected user contained an unauthorized hardware implant.
Visual evidence shared on platforms such as X and Threads appears to reveal a small circuit board lodged beneath the screen of the affected wallets. This implant purportedly intercepts crucial information displayed during the wallet’s setup process, including the seed passphrase. Using an embedded SIM card, it then transmits this sensitive data to the perpetrator, enabling unauthorized access to user accounts and subsequent fund theft.
Reports suggest that the responsible party has stolen assets worth over $86 million from numerous wallets, primarily targeting users in Southeast Asia through a supply chain attack. Notably, there are no indications that Ledger’s systems themselves have been breached, nor have wallets bought directly from the company been implicated. Ledger has issued guidance for users on how to detect any tampering with their devices.
Update: October 10, 2026: Additional statements from Ledger have been included.
Editor’s Take
The revelation of tampered hardware raises serious concerns about the security of cryptocurrency wallets. This incident serves as a stark reminder of the vulnerabilities in supply chains, imperative for consumers to remain vigilant when purchasing technological products. For businesses and developers, ensuring the integrity of hardware through stricter controls may become critical in preserving user trust.
Source: www.theverge.com
