Ledger Hardware Supply Chain Attack Confirmed
Ledger has confirmed an unauthorized hardware implant was found in devices sold by CryptoBilis, a Southeast Asian reseller, prompting MediaMarkt Saturn to halt all Ledger sales globally while the investigation continues.
What we know
Ledger's security team (Donjon) confirmed that signers sold by CryptoBilis — a reseller in Southeast Asia — contained an unauthorized hardware implant, verified for at least one affected user as of October 10th — an account on X. As of October 13th, MediaMarkt Saturn has suspended the sale of all Ledger devices in-store and online while the investigation continues — another account on X. Community reaction ranges from dark humor to calls for Ledger to rethink its hardware model — another account on X. This comes amid broader CT discussion about physical security risks, with another account on X noting the irony of dodging every possible crypto security threat only to lose 20% to price action — another account on X.
How the story developed
Ledger has confirmed an unauthorized hardware implant was found in devices sold by CryptoBilis, a Southeast Asian reseller, prompting MediaMarkt Saturn to halt all Ledger sales globally while the investigation continues.
Ledger's Donjon team confirmed an unauthorized hardware implant in signers sold by Southeast Asian reseller CryptoBilis that reads private keys. Fund losses confirmed; total scope still under investigation.
Ledger has confirmed an unauthorized hardware implant in devices sold through reseller CryptoBilis, with losses potentially exceeding $86M. The incident has reignited debate about hardware wallet trust and self-custody vs. exchange custody.
Ledger has confirmed a hardware implant inside a tampered device linked to the $93M theft, with all cases tied to Southeast Asian reseller CryptoBillis. The hacker's attempt to launder funds through Tornado Cash and Zcash's shielded pool was traced step-by-step.
Nearly $90 million has reportedly been stolen from crypto investors through compromised Ledger devices sold by a Southeast Asian online distributor.
A fake Ledger phishing site is topping Google search results with over 1M monthly visits, connected to ongoing investigations into $86M in wallet thefts linked to a Southeast Asian reseller named CryptoBilis.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.