Ledger crypto wallet tampering suspected in major theft
Ledger is investigating reports that hundreds of its crypto wallets sold by Southeast Asian reseller CryptoBilis were compromised with unauthorized hardware implants, leading to thefts of at least $71 million and possibly up to $86 million in cryptocurrencies. The tampered devices reportedly sent sensitive information like recovery phrases back to attackers, resulting in large-scale fund drains. Ledger says there's no evidence its core systems or direct sales were affected.
Why it mattersSupply chain attacks targeting hardware wallets can undermine trust in the wider crypto ecosystem. The size of the losses highlights how hardware device security flaws may allow large-scale thefts even when central systems are not breached.
- Ledger wallets sold by CryptoBilis reportedly tampered
- Implants could intercept and transmit recovery phrases
- Over $71 million stolen, possibly up to $86 million
- Ledger's core infrastructure not reported compromised
- Incident mainly affects Southeast Asian customers
Sources covering this
In this story
More in Cybersecurity
FBI arrests Canadian cyber firm co-founder in ransomware case
The FBI has arrested Edward Dubrovsky, co-founder of Canadian cybersecurity firms, while he was visiting Pennsylvania.
Criminal IP launches AITEM for AI-driven threat exposure management
Criminal IP, part of AI SPERA, has announced AITEM, an AI-powered platform aimed at advancing attack surface management for security teams.