ព័ត៌មានសំខាន់
Ledger is investigating a supply chain attack involving unauthorized hardware implants found in wallets sold through the Southeast Asia reseller CryptoBilis. The company confirmed that these devices were linked to a draining incident reported on October 9, 2026. While estimates from YFarmX suggest over $100 million in cryptocurrency may have been stolen, Ledger maintains that the volume of impacted devices is limited.
Disassembly of affected units reveals that the implants were soldered behind the screen, replacing the battery padding to avoid detection. By capturing information directly from the screen, the modification bypasses the device's standard hardware tampering checks. Ledger noted that its internal integrity systems cannot identify such physical modifications if the original Secure Element remains intact.
CryptoBilis has ceased all sales of hardware wallets while the investigation continues. Ledger is currently working with authorities to address the situation and is reaching out to affected users. The company emphasized that its direct sales channels and internal systems remain unaffected by this incident.
Ledger advises users to purchase only through authorized channels and avoid restocking returned products. Users concerned about their devices are encouraged to contact official support. While some reports suggest the issue might extend beyond Southeast Asia or affect other models, Ledger has not yet provided official confirmation regarding these broader claims.
