Ledger Confirms Unauthorized Hardware Implant in Compromised Device, Estimated Losses Exceed $86 Million
Ledger Finds Unauthorized Electronics in a User's Device
Hardware wallet maker Ledger confirmed on Saturday that one of the devices linked to recent crypto fund-draining reports contained an unauthorized hardware implant — extra electronics added to the device. A hardware wallet is a small physical device that holds the private keys used to access cryptocurrency stored on a blockchain.
Ledger said it is contacting affected users as part of its ongoing investigation. The company also asked anyone with information about the case to reach out through its bounty program at [email protected].
What Specter Reported
Blockchain investigator Specter estimated that the losses may exceed $86 million, spread across Bitcoin, Ethereum, and Tron. This figure is an estimate, not a confirmed total.
Key Details From the Investigation
- Ledger confirmed at least one affected user's device had an unauthorized hardware implant.
- The incident appears to be linked to a single reseller, CryptoBilis, which operated as an authorized Ledger reseller in Indonesia, Malaysia, and the Philippines.
- CryptoBilis has stopped selling all hardware wallet inventory until the investigation concludes.
- Ledger is in active communication with CryptoBilis about next steps.
- Ledger said its own infrastructure, systems, and services were not compromised.
What Ledger Advised Affected Users to Do
Ledger recommended that users who purchased a Ledger device from CryptoBilis should not begin the setup process if they have not already done so. If a user has already set up the device, Ledger advised them to consider moving their assets to a new Ledger device and to use a new seed phrase — the set of words that acts as the backup key for a wallet.
What Remains Unclear
Ledger has not confirmed how many customers may be affected. The company also has not confirmed the value of the reported losses. The $86 million figure comes from investigator Specter's estimate and has not been verified by Ledger. The investigation is still ongoing, and Ledger has not announced a timeline for when it will be completed.
Why This Matters for Hardware Wallet Users
Hardware wallets are widely used as a way to keep cryptocurrency offline and away from online threats. If a device can be tampered with before it reaches the buyer, users who rely on it to protect their assets may lose those funds without realizing the device was altered. The incident highlights the importance of buying crypto devices from verified, trusted channels.