Ledger confirms hardware implant in wallets sold through reseller CryptoBilis after cryptocurrency theft reports

Ledger confirmed that a hardware wallet sold through the reseller CryptoBilis contained an unauthorized hardware implant, following reports of stolen funds from buyers in Southeast Asia. A pseudonymous blockchain investigator put losses above 86 million dollars, while Ledger described a limited number of affected devices, all sold through that reseller. Ledger paused sales through CryptoBilis, which halted all hardware wallet sales pending the investigation. Ledger advised buyers from the past 90 days not to set up unconfigured devices, and to move assets to a new signer with a fresh seed if a device was already initialized. Users should avoid unauthorized resellers.

Check

If you bought a Ledger from CryptoBilis in the last 90 days, do not initialize unconfigured devices and move any existing assets to a new signer with a fresh seed.

Affected

Ledger hardware wallets bought through the reseller CryptoBilis may contain an implant that has been linked to cryptocurrency theft from buyers in Southeast Asia.

Fix

Buy hardware wallets only from authorized channels, never reuse a pre-printed recovery phrase, move funds to a new device and seed if compromise is possible, and never share recovery phrases.