Hardware wallet maker Ledger confirmed that one of the affected users' devices contained an unauthorized hardware implant, following an investigation into crypto losses linked to purchases from Southeast Asian reseller CryptoBilis.
Ledger announced the finding in a statement, noting that investigator Specter estimated potential losses may exceed $86 million across Bitcoin, Ethereum and Tron. The company said its infrastructure, systems and services were not compromised, and indicated the incident appeared isolated to the single reseller and its market.
User Recommendations
Ledger advised users who purchased devices from CryptoBilis to take immediate precautions. Those who have not yet set up their devices should refrain from doing so. Users who have already completed setup should consider transferring assets to a new Ledger signer with a new seed phrase.
CryptoBilis, listed as an authorized Ledger reseller in Indonesia, Malaysia and the Philippines, confirmed it had halted sales of all hardware wallet inventory pending the investigation's conclusion.
Ongoing Investigation
Ledger said it was actively reaching out to affected users and invited anyone with relevant information to contact its bounty program at [email protected]. The company has not disclosed how many customers may be affected or confirmed the total value of reported losses.
Ledger remains in active communication with CryptoBilis regarding next steps. Users seeking assistance can contact Ledger customer support through official channels at support.ledger.com.
