Ledger confirms unauthorized hardware implant in wallets, losses may top $86M

Hardware wallet manufacturer Ledger has confirmed that a user’s device purchased from a Southeast Asian reseller contained an unauthorized hardware implant, with potential losses estimated to exceed $86 million.

The company stated in an October 11 update that the incident appears isolated to a single reseller, CryptoBilis, and its market. Ledger emphasized that its own infrastructure, systems, and services were not compromised in the incident.

Investigator Specter estimates the losses span Bitcoin, Ethereum, and Tron assets. The reseller, listed as an authorized Ledger partner in Indonesia, Malaysia, and the Philippines, has ceased sales of all hardware wallet inventory as a precaution while the investigation continues.

Ledger is contacting affected users and recommends that anyone who purchased a device from this reseller and has not yet set it up should not do so. Those who have already set up a device should consider moving assets to a new Ledger signer with a fresh seed phrase.