Crypto hardware wallet manufacturer Ledger confirms that an unauthorized hardware implant was discovered inside a device linked to crypto thefts through Southeast Asian reseller CryptoBilis. While investigator Specter estimates losses may exceed $86 million across Bitcoin, Ethereum, and Tron, Ledger states its primary infrastructure remains uncompromised. CryptoBilis has suspended all wallet sales as former Mt. Gox CEO Mark Karpelès independently dismantled a rogue implant.
Ledger hardware wallet tampering incident
- ▪Ledger stated on October 11, 2026, that its infrastructure, systems, and services were not compromised, indicating the security incident linked to reseller CryptoBilis was isolated to a single reseller market
- ▪Crypto investigator Specter estimated that crypto asset losses linked to the Ledger security incident may exceed $86 million across Bitcoin, Ethereum, and Tron
Unauthorized hardware implant discovery
- ▪An unauthorized electronic component discovered inside an affected Ledger device linked to the CryptoBilis incident taps into communication lines between internal wallet components and the display screen without requiring a breach of the secure element chip
- ▪Ledger's investigation into the CryptoBilis incident on October 10, 2026, provided the first concrete evidence of hardware tampering in devices distributed through authorized reseller CryptoBilis
User asset protection response
- ▪Ledger directed individuals with information regarding the CryptoBilis hardware tampering incident to submit details through its bounty program at bounty@ledger.fr or contact official customer support
- ▪Ledger advised customers who purchased Ledger devices from CryptoBilis to avoid setting them up, or to transfer assets to a new Ledger signer with a new seed phrase if already configured
Mark Karpelès independent analysis
- ▪Mark Karpelès reported dismantling a hidden electronic spy implant found inside a Ledger Nano X device from Malaysia that had arrived in seemingly intact shrink-wrap packaging
- ▪Former Mt. Gox CEO Mark Karpelès stated on October 10, 2026, that he independently confirmed hardware modifications in Ledger Nano X devices after examining photographs provided by users affected by the CryptoBilis security incident
Debatable claims
- ▪Crypto holders bear primary responsibility for verifying the physical integrity of hardware wallets
- ▪Ledger bears responsibility for losses caused by tampered devices sold through its authorized resellers
- ▪Hardware wallet manufacturers should eliminate third-party retail networks to prevent supply chain tampering
Story comments
Loading comments…