Ledger probes alleged hardware implant tied to $86M crypto thefts
Ledger has asked reseller CryptoBillis to stop selling its wallets while it investigates reports of tampered devices. Images shared online appear to show a small circuit board hidden beneath the screen that could capture seed phrases and transmit them via an embedded SIM. The suspected supply chain attack has been linked to more than $86 million stolen from hundreds of wallets, mostly in Southeast Asia, though Ledger says its own systems and direct sales are not implicated.
Ledger has told reseller CryptoBillis to halt wallet sales during an inquiry into reports of modified devices. Online images and clips appear to show a compact board placed beneath the display, potentially recording setup seed phrases and relaying them through an integrated SIM.
The suspected supply-chain compromise has been connected to more than $86 million taken from hundreds of wallets, largely in Southeast Asia. Ledger states its own infrastructure and purchases made directly from the company were not affected, and it has published steps for checking whether a device has been altered.
This incident could deepen distrust in crypto hardware supply chains, especially for users who buy through third-party resellers. People in affected regions may face financial loss, while broader wallet owners might adopt more verification steps or direct purchasing. It may also push manufacturers and resellers to strengthen tamper-evident packaging and device authentication, though the full scope remains unclear.