Ledger says unauthorized implant found in at least one device sold by CryptoBilis
Ledger has confirmed that hardware wallets sold by a Southeast Asian reseller, CryptoBilis, contained unauthorized hardware implants leading to the theft of millions in cryptocurrency. The company is urging affected users to move their assets to new, verified devices.
Why it matters
This represents a major supply-chain security breach in the crypto industry, highlighting the risks of purchasing hardware security devices from unauthorized third-party resellers.
In a statement released on Oct. 10, Ledger Support stated , “Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant.” The company added that it is actively contacting affected users as part of an ongoing investigation, and that CryptoBilis has suspended sales of all hardware wallet inventory until the investigation concludes.
In a follow-up update on Oct. 11, Ledger noted that the volume of impacted devices appears limited. “To date, all confirmed cases related to the disclosed draining incident of Oct 9th, 2026, involve devices sold through the Southeast Asia reseller CryptoBilis,” the company stated, adding that its internal systems and direct sales channels remain unaffected.
The confirmation of a physical implant marks the first concrete evidence supporting earlier speculation of supply-chain tampering.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in