Skip to content

Back to the catalog

Ledger Asks Resellers in Seven Asian Markets to Pull Devices After Suspected $86M Drain
decrypt.coarticle

Ledger Asks Resellers in Seven Asian Markets to Pull Devices After Suspected $86M Drain

Ledger asked resellers and distributors in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong to pull its hardware wallets while it investigates devices fitted with a hidden implant. Its Donjon team found the implant reads the 24-word recovery phrase from the screen during setup and sends it out over LTE. All confirmed losses trace to devices sold through reseller CryptoBilis, and Specter has traced over $86M in suspected thefts, which Ledger has not verified. Ledger says its own infrastructure and direct channel show no compromise. MediaMarkt Saturn halted sales after a German customer reported an implant, and Trezor is ending reseller authorizations on January 1, 2027.

TL;DR Ledger suspends sales via Southeast Asian resellers after tampered wallets with LTE implants leaked seed phrases, with a suspected $86M drained.
Open original ↗

Organisations named here

  • Donjon
  • MediaMarkt Saturn

Technologies named here

  • Ledger Donjon
  • Specter
  • Ledger
  • Trezor

Techniques named here

  • Hardware supply chain tampering

Threat actors named here

  • CryptoBilis

Related in Blockchain