< Back to all clusters
[TECHNOLOGY] · Malaysia, Indonesia, Philippines, Taiwan, Latvia · 68 sources

started · updated

Ledger investigates hardware implants in devices sold via CryptoBilis

Ledger is investigating a supply chain attack involving unauthorized hardware implants in its devices. The company confirmed that at least one affected device contained a malicious component, which reportedly monitors the display bus to capture the 24-word recovery phrase during the initial setup process.

All confirmed cases of asset theft are linked to devices sold through the Southeast Asian distributor CryptoBilis, which was an authorized reseller in Malaysia, Indonesia, and the Philippines. Ledger has requested that CryptoBilis suspend all sales and shipments of its products pending the investigation.

Blockchain analysis firm Bitquery estimates that approximately $93.2 million in assets across 315 wallet addresses have been stolen across six blockchains, including Bitcoin, Ethereum, and Tron. Tether has reportedly frozen approximately $10 million in related USDT assets. While reports of compromised devices have surfaced in Europe, Ledger has not yet confirmed if these cases are linked to the same supply chain breach.

Entities

Arkham Intelligence · Bitcoin · Bitquery · Changpeng Zhao · CryptoBilis · Ethereum · Ledger · Mark Karpelès · Southeast Asia · Specter · Tether

Claims

What the coverage asserts, and how many sources carry each claim.

Sources