Ledger confirmed over the weekend that it discovered an unauthorized hardware implant inside at least one wallet device tied to an ongoing investigation into suspected cryptocurrency theft. The hardware wallet manufacturer said it has contacted affected users and begun working with authorities.
The initial incident involved customers who purchased devices through CryptoBilis in Indonesia, Malaysia, and the Philippines. Early reports estimated suspected losses at over $80 million, though a later analysis by Bitquery placed the figure closer to $93 million across 311 wallets on five blockchain networks.
Ledger stated that it has no indication its security infrastructure, systems, or services were compromised. The company has not yet determined how many affected devices contain implants or confirmed whether the discovered implant is responsible for all reported wallet drains.
A community report on social media claimed that a Ledger device purchased through MediaMarkt in Europe may also have been compromised, potentially widening the scope of the incident beyond Southeast Asia. However, the European situation has not been confirmed by Ledger, and observers examining published images disagree about whether the hardware shows signs of tampering. Some users argued the device appears inconsistent with a genuine Ledger board, while others said they could not identify the same type of additional implant found in the Southeast Asian cases.
MediaMarkt is an official Ledger reseller in several European markets including Germany and Austria. The European reports remain unconfirmed while the original investigation in Asia continues.
