Ledger Finds Unauthorized Hardware Implant in Wallet Sold by CryptoBilis Amid Fund Theft Reports
Summary
Ledger found an unauthorized hardware implant in one device sold by CryptoBilis and is investigating reports of stolen funds. It advises affected users to take precautions; the reseller has paused hardware wallet sales during the probe.
Key points
- Ledger is investigating reports of lost funds from Southeast Asian users who bought devices through CryptoBilis.
- Blockchain investigator Specter attributed more than $86 million in losses to the incident; Ledger has not confirmed that total in the article.
- Ledger said one impacted user's device contained an unauthorized hardware implant and described the number of affected devices as limited.
- Ledger advised customers who bought from CryptoBilis within the past 90 days not to set up unused devices and suggested moving assets from set-up devices to a new signer with a new seed.
- CryptoBilis paused sales of its hardware wallet inventory while the investigation continues.
- CryptoBilis warned users to treat a wallet as unsafe if its recovery phrase was pre-printed or seen by anyone else, and cautioned against sharing recovery phrases or PINs.
- Ledger advised resellers to use authorized supply channels and not restock returned products.
Article Details
- Victim Organization
- CryptoBilis
- Incident Type
- Unauthorized hardware implant found in a Ledger device sold through CryptoBilis, amid reports of stolen cryptocurrency funds.
- Disclosure Date
- 2026-10-11
- Operational Impact
- CryptoBilis ceased sales of its hardware wallet inventory pending the investigation. Ledger paused sales through the reseller, investigated reports, contacted impacted users, and advised users who had set up affected devices to move assets to a new Ledger signer with a new seed.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed