Crypto investors are reeling after a sophisticated supply chain attack resulted in the theft of over 86 million dollars from hundreds of digital wallets. The breach centers on tampered Ledger hardware devices sold through a third party reseller known as CryptoBillis. While many users initially reported their accounts being mysteriously drained, investigations revealed that certain devices were shipped with malicious hardware implants designed to steal sensitive data.
Evidence shared across social media platforms shows a tiny, unauthorized circuit board hidden beneath the device screens. This spy implant reportedly captures everything displayed during the initial setup process, specifically targeting the critical seed passphrases used to secure funds. Once captured, the implant uses an integrated SIM card to transmit those private keys directly to attackers, allowing them to bypass security and siphon assets remotely.
Ledger has since stepped in to contain the damage, requesting that CryptoBillis halt all sales while a full investigation unfolds. Company officials confirmed that at least one analyzed device contained an illegal implant but emphasized that there is currently no evidence suggesting Ledger’s internal systems were breached. Furthermore, customers who bought their wallets directly from the manufacturer appear to be safe from this specific threat.
The impact seems largely concentrated among users in Southeast Asia who purchased through the compromised reseller rather than official channels. In response to the crisis, Ledger has issued urgent guidance helping owners verify whether their physical hardware has been modified. Security experts warn that this incident highlights the extreme risks associated with purchasing high security hardware from unverified secondary sources.