Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger halted Asia and Hong Kong reseller sales after tampered wallets stole seed phrases over LTE.
Ledger told distributors and resellers in Southeast Asia and Hong Kong to stop selling hardware wallets after confirming supply-chain tampering. Devices from reseller CryptoBilis contained a separate microcontroller implant that decodes the 24-word recovery phrase and transmits it over LTE using an eSIM, without modifying the Secure Element or Ledger OS. Ledger said confirmed fund losses involve CryptoBilis units, while users also reported modified devices from a Singapore airport retailer and MediaMarkt in Europe. Trezor said it found no compromise of its own devices but will end many reseller authorizations on January 1, 2027.
78