Hacking News
Ledger Confirms Unauthorized Hardware Implant Found in CryptoBilis Devices
Ledger, a cryptocurrency wallet manufacturer, has confirmed that one of the devices linked to recent user fund losses contained an unauthorized hardware implant. The company stated that all confirmed cases identified so far involve products distributed through the Southeast Asian reseller CryptoBilis. CryptoBilis has suspended sales of all hardware wallet inventory until the investigation concludes. The incident first came to light on Friday, when Ledger acknowledged investigating reports of missing funds from customers who purchased devices through CryptoBilis, which operates in Indonesia, Malaysia, and the Philippines. The confirmed implant marks the first concrete evidence supporting earlier speculation of supply-chain tampering. The volume of impacted devices appears limited, with Ledger noting that the confirmed cases involve devices sold through CryptoBilis. No internal systems or services of Ledger have been compromised, and the company is cooperating with relevant authorities and reminding customers to take necessary precautions.