Cryptocurrency: Security Analysis of Hardware Crypto Wallets

What it is

From 9 October 2026, hundreds of buyers of Ledger Nano X devices from the Southeast Asian reseller CryptoBilis lost funds on Bitcoin, Ethereum, TRON and other chains. On-chain researchers put losses between roughly $86 million and over $100 million. Ledger confirmed at least one affected device held an unauthorized hardware implant. It says every confirmed loss traces to a CryptoBilis sale and that its own infrastructure, firmware and direct sales were not compromised.

How it works

Someone in the distribution chain opened genuine devices, fitted a small board and resealed them. The board sits under or behind the screen, where foam padding normally is. It taps the SPI bus between the Secure Element and the display, recognizes the recovery-phrase screens, and sends the words over LTE using an eSIM and a small antenna. Mark Karpelès and Tibane Labs have documented several generations. Early ones had visible wires and a smaller battery. Later ones use flex circuits, are harder to spot, and sometimes keep the original battery. Karpelès posted a unit from Malaysia whose packaging looked flawless.

Preconditions / Affected

The theft happens at setup, when the device shows the 24-word phrase, so only devices initialized after tampering are exposed. CryptoBilis was an authorized reseller, so being on the manufacturer's reseller list did not protect buyers. Similar implants have been reported in units from Japanese marketplaces and at least one European store. Ledger has not tied any fund loss to those channels.

What to do

flowchart TD
    A[Device from CryptoBilis or other third party?] -->|No, bought direct| B[Generate seed on device, write it yourself]
    A -->|Yes| C{Already initialized?}
    C -->|No| D[Do not initialize it]
    C -->|Yes| E[Treat seed as compromised]
    E --> F[Move assets to new signer bought direct, fresh seed]

• Buy only from the manufacturer's own store. Marketplace shops carry higher risk of counterfeits and implants.
• Reject any device that ships with a recovery phrase already printed. The phrase must appear only on the device screen, and you write it down yourself on paper or metal. Never type it into a computer or phone.
• If you already set up a device from CryptoBilis or another doubtful source, move assets to a new signer bought directly from Ledger and initialized with a fresh seed. Never reuse the old seed. Ledger's advice to unused-device owners is not to initialize them.
• After setup, compare receiving addresses on the device screen with those in the companion app, and check block explorers for unexpected outgoing transfers.
• Optional hardening: a BIP-39 passphrase (the "25th word"), which the device does not display or generate during setup and which creates a separate hidden wallet with different keys and addresses. For larger holdings, use multisignature so no single device is trusted. Always verify the destination address, since lookalike addresses are used to mislead senders.

Caveats

Genuine Check still passes, because it confirms only that the Secure Element and firmware are authentic. It cannot see added circuitry that listens to the screen. Visual inspection of the case is unreliable against newer implants, and dependable detection usually means opening the device. The page links Karpelès videos on opening and closing Ledger wallets but gives no teardown procedure. It does not explain how the implants entered the supply chain beyond the reseller.