Ledger hardware wallet (Product): news timeline & CVEs

Ledger asks sellers across Asia to halt sales after supply-chain attack

Ledger halted Asia and Hong Kong reseller sales after tampered wallets stole seed phrases over LTE.

Ledger told distributors and resellers in Southeast Asia and Hong Kong to stop selling hardware wallets after confirming supply-chain tampering. Devices from reseller CryptoBilis contained a separate microcontroller implant that decodes the 24-word recovery phrase and transmits it over LTE using an eSIM, without modifying the Secure Element or Ledger OS. Ledger said confirmed fund losses involve CryptoBilis units, while users also reported modified devices from a Singapore airport retailer and MediaMarkt in Europe. Trezor said it found no compromise of its own devices but will end many reseller authorizations on January 1, 2027.

BleepingComputerOct 14, 17:46 UTC · 2d agoData breach in the wild1· 1 read

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports

Ledger found a hardware implant in a CryptoBilis-sold wallet after reports of more than $86 million in stolen crypto.

Ledger paused sales through reseller CryptoBilis after Southeast Asian users reported stolen cryptocurrency totaling more than $86 million, according to investigator Specter. Ledger said one affected device contained an unauthorized hardware implant and that all confirmed cases involve CryptoBilis-sold devices. Buyers from the last 90 days were told not to set up unused devices and to move assets to a new signer with a new seed if already set up. CryptoBilis halted hardware-wallet sales and warned that a pre-printed recovery phrase means the wallet should be treated as unsafe.

The Hacker Newsupdated Oct 13, 08:34 UTC · 3d agofirst Oct 12, 11:21 UTC · 4d agoData breach in the wild 5 sources1· 1 read

Ledger hardware wallet

Timeline2 articles

Appears with

Ledger asks sellers across Asia to halt sales after supply-chain attack

Ledger Finds Unauthorized Hardware Implant in CryptoBilis-Sold Wallet Amid Fund Theft Reports