Ledger confirmed on Thursday that a covert hardware implant was discovered in a batch of its hardware wallets sold through a Southeast Asian reseller, potentially exposing users to theft of cryptocurrency worth more than $86 million. The company said the incident appears to be limited to a single reseller, identified as CryptoBilis, and to devices distributed in the region.
Scope of the Attack
According to Cointelegraph, the implant was a hidden chip embedded inside the sealed wallet, enabling unauthorized access to private keys. BeInCrypto and The Verge described the component as a “spy chip” that could relay transaction data to an external server. The discovery was first reported by users who noticed unexplained withdrawals after purchasing the device from the Malaysian reseller.
Investigations by multiple outlets, including BigGo Finance and AMBCrypto, suggest the total financial loss may exceed $90 million, with some estimates reaching $91 million. Cointelegraph and The Crypto Times have consistently cited $86 million as the baseline figure, noting the discrepancy reflects ongoing assessments and the difficulty of tracing all affected accounts.
Ledger's Response and User Guidance
Ledger issued an urgent advisory urging all users of the compromised devices to generate a new seed phrase on a trusted, uncompromised wallet and transfer their assets immediately. The company
"We have identified a hardware implant that was inserted into a limited number of devices sold through a single reseller in Southeast Asia. Users should consider these wallets compromised and re‑seed their funds as a precautionary measure,"the statement read, as reported by The Crypto Times.
In addition to the re‑seeding recommendation, Ledger has suspended sales of the affected model, referred to in some reports as the “CryptoBilis wallet,” and is working with law‑enforcement agencies to trace the source of the tampering. Coin Edition confirmed that the company has blocked further distribution through the reseller and is conducting a full supply‑chain audit.
Market Reaction and Industry Implications
The news arrived as Bitcoin was trading near $82,800 after a volatile week, according to The Crypto Times. While the price dip was modest, analysts noted that the incident could reignite concerns over self‑custody solutions, a sentiment echoed by AMBCrypto which quoted industry observers saying “self‑custody will die very quickly” if supply‑chain attacks become more prevalent.
High‑profile figures have also weighed in. Binance CEO Changpeng Zhao (CZ) warned Ledger users to stay vigilant, and former Mt. Gox chief cited the hidden chip as evidence that “hardware wallets are not immune to sophisticated supply‑chain threats,” as reported by The Crypto Times. The incident has spurred broader discussions about the security of hardware‑based crypto storage and the need for stricter verification processes.
Compounding the issue, a fake Ledger website that mimics the official site has surfaced in Google search results, potentially luring users to phishing scams, according to CryptoTicker. Security experts advise users to verify URLs and download firmware only from Ledger’s official channels.
Overall, the episode underscores the growing sophistication of attacks targeting the cryptocurrency ecosystem’s infrastructure. While Ledger’s swift acknowledgment and remediation steps aim to contain the fallout, the episode may prompt regulators and industry players to reevaluate standards for hardware wallet manufacturing and distribution worldwide.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $82,969 | +0.19% | $1667.4B |
 Ethereum ETH | $2,500 | +0.20% | $305.3B |
 BNB BNB | $746.71 | -0.42% | $99.4B |
 XRP XRP | $1.39 | -0.97% | $88.0B |
 Solana SOL | $109.39 | -0.50% | $64.4B |
 Dogecoin DOGE | $0.0853 | -0.98% | $13.3B |
 Cardano ADA | $0.247 | -3.37% | $9.3B |
Live data: CoinGecko — 2026-10-11 09:20 UTC
