Ledger Hardware Wallet Supply Chain Attack Nears $93M in Losses
Unauthorized hardware implants found in devices sold by authorized reseller CryptoBilis across Southeast Asia.
KEY POINTS
- Unauthorized hardware implant found in Ledger device sold by authorized reseller CryptoBilis
- Estimated losses reach $93 million across 311 wallets on five chains
- Former Mt. Gox CEO Mark Karpelès discovered hidden microcontroller behind device screen
- Tether freezing USDT linked to thefts; Ledger backend systems unaffected
- CryptoBilis ordered to halt all hardware wallet sales during investigation
Ledger confirmed that at least one hardware wallet sold through authorized reseller CryptoBilis contained an unauthorized electronic implant, with potential losses estimated at $93 million across 311 wallets on five blockchains. The reseller operates in Malaysia, Indonesia, and the Philippines.
Former Mt. Gox CEO Mark Karpelès discovered a hidden microcontroller module concealed behind the screen of a Ledger Nano X purchased in Malaysia, despite intact shrink-wrap packaging. Ledger has asked CryptoBilis to halt all hardware wallet sales while investigations continue.
“Based on information so far, it seems to be localized to a supply chain attack with one vendor.”
Tether has moved to freeze USDT stablecoins linked to the thefts. Binance founder Changpeng Zhao described the incident as a localized supply chain attack and urged industry-wide cooperation to trace and recover stolen assets.
Ledger stated its own backend systems and services show no signs of compromise, pointing toward physical tampering at the reseller level. The company is working with authorities and contacting affected users directly.
2 more sources below
COMMENTS (0)
No comments yet. Be the first.
RELATED STORIES
Romania Environment Minister Accuses Weather Agency of Illegal Direct Contracts
Diana Buzoianu says the National Meteorological Administration awarded millions in direct contracts for toner, IT equipment and furniture over four years, exceeding legal thresholds.
Character.AI Files for Bankruptcy, Agrees to Sell Assets to Disney
The once-billion-dollar chatbot startup enters Chapter 11 and sets a $20 million stalking-horse bid from Disney.
Duane 'Keffe D' Davis sentenced to 40 years to life for Tupac Shakur murder
The former gang leader was convicted of orchestrating the 1996 killing of the rap icon in Las Vegas.
This page was compiled with AI assistance from the outlets named above and passed an automated language check before publication. Montegre has no reporters of its own; the byline names the outlets the story was compiled from. Method and editorial standards