Ledger Confirms Unauthorized Hardware Implant; Losses May Exceed $86M
Hardware wallet maker Ledger confirmed the presence of unauthorized hardware implants in devices bought from a Southeast Asian reseller, CryptoBilis. Investigations estimate potential losses exceeding $86 million across cryptocurrencies including Bitcoin, Ethereum, and Tron. Ledger is reaching out to affected users, inviting anyone with relevant information to contact its bounty program. The company advises users who purchased devices from this reseller to avoid initializing them until investigations conclude.
Incident Discovery and Current Status
Ledger confirmed that at least one user device purchased through the Southeast Asian reseller CryptoBilis contained an unauthorized hardware implant. The company is actively investigating the scope of the issue and assisting affected wallet owners.
Reseller CryptoBilis announced it has halted all Ledger hardware wallet sales pending the investigation's conclusion. Ledger remains in close communication with CryptoBilis to determine next steps.
Scale of Losses and Impact
Independent investigator Specter estimates the total user losses may exceed $86 million across cryptocurrencies such as Bitcoin, Ethereum, and Tron. Ledger has not disclosed precise figures regarding the number of customers affected or total monetary value lost.
Ledger emphasized that its own infrastructure, systems, and services were not compromised, characterizing the event as an isolated incident related to a single reseller in a specific market.
User Recommendations and Communication
Ledger strongly advises users who purchased devices from CryptoBilis not to initialize them if they have yet to do so. For those who have already set up their wallets, transferring assets to new Ledger devices with fresh recovery seeds is recommended.
Any individuals with information relevant to the investigation are encouraged to reach out to Ledger’s bounty program at bounty@ledger.fr. For general assistance, customers should contact Ledger’s official customer support via support.ledger.com.
Why it matters
The revelation of unauthorized hardware implants in Ledger devices purchased through a particular reseller highlights the significant security risks facing hardware wallets, even when the manufacturer’s core systems remain secure. Estimated losses exceeding $86 million in cryptocurrency underline the severity of vulnerabilities introduced via supply chain and reseller integrity failures. This incident stresses the critical importance for users to carefully select legitimate purchase channels and the need for manufacturers to maintain transparency and collaboration with law enforcement and independent investigators to swiftly identify and contain threats.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗