Ledger Confirms Unauthorized Hardware Implant in a Victim's Wallet as On-Chain Estimates Put CryptoBilis-Linked Losses at $93.2 Million Across 315 Wallets
Hardware-wallet maker Ledger has confirmed that a device belonging to one victim of a widening crypto drain contained an unauthorized hardware implant — the company's first confirmation of physical tampering in a supply-chain case centred on CryptoBilis, its authorised reseller in Indonesia, Malaysia and the Philippines. Ledger said on Oct. 9 that it was investigating reports of drained wallets among the reseller's customers and asked CryptoBilis to halt sales; in an Oct. 10 update it confirmed the implant.
On-chain investigators have tallied losses well beyond the first reports. Bitquery counts $93.2 million taken from 315 wallets across Tron, Bitcoin, Ethereum, BNB Chain, Polygon and Solana, with roughly three-quarters on Tron; Tether has frozen about $10 million in related USDT.
The suspected mechanism targets the wallet's most fragile moment: setup, when the recovery phrase appears on screen. Ledger advises anyone who bought a device from CryptoBilis in the past 90 days not to initialise an unused device, and, if they have already set one up, to consider moving assets to a new signer generated from a fresh seed.
(Sources: Cointelegraph, Bitquery)
Source: Cointelegraph、Bitquery
Published by GSM · USA (original Chinese edition)
Photo: 图：手持的Ledger硬件钱包实物，屏幕与品牌标识清晰可见。摄影：Roderart，CC BY-SA 4.0，来源：Wikimedia Commons
