Security· ★★★★★· bearish·

Ledger confirms hidden hardware implant in devices, losses up to $93M

  • —Ledger confirmed the implant on Oct. 10 in a victim's device bought from CryptoBilis
  • —The implant reads the screen during setup, decodes the seed phrase and sends it over LTE via eSIM
  • —Losses estimated at $86–93 million across hundreds of wallets; Ledger has not confirmed figures
  • —CryptoBilis halted sales and MediaMarkt Saturn pulled Ledger devices on Oct. 13
Why it matters: A supply-chain attack undermines trust in hardware wallets; users should verify device provenance and move funds if in doubt.
Source: Cryptoast