Ledger confirms unauthorized hardware implant in one wallet

The Verge reported on October 10 that Ledger had confirmed an unauthorized hardware implant in one affected customer’s device. Ledger’s precautionary advice concerns purchases through CryptoBilis, so the seller on your receipt matters when checking whether that guidance applies to you.

The finding concerns one affected device

Ledger is investigating reports of missing funds from customers in Southeast Asia who bought devices through CryptoBilis. Possible tampering in the supply chain is under investigation.

The implant confirmed in The Verge’s report establishes physical tampering in one affected device. It does not establish that the same alteration caused every reported loss.

For CryptoBilis buyers, setup status matters

In its October 9 notice, Ledger said it had asked CryptoBilis to pause all sales and shipments of Ledger devices pending the investigation. Customers who had purchased from that reseller within the preceding 90 days were advised not to begin setup if they had not already done so.

For customers who had already completed setup, Ledger advised considering a move of assets to a new Ledger device with a newly generated recovery phrase. The guidance specifies a new phrase, not reuse of the existing one on a replacement device.

Start with the seller on your receipt

Check the seller on your receipt or order record and whether you have already completed setup. If your purchase falls within the group covered by the October 9 notice, direct questions about the guidance to Ledger’s official support channels.

The number of affected customers and the connections between reported losses remain unconfirmed. Neither The Verge nor CoinDesk reports a confirmed breach of Ledger’s own systems or confirmed compromise of devices purchased directly from Ledger.