Ledger Says LTE Implants Copied Crypto
Reported by Cointelegraph · AI-assisted summary by ChikoCorp AI News Desk
AI-generated summary based on the linked source; not independently verified. This is not investment advice. Verify market-moving details at the original publisher before acting. See our editorial policy, AI content policy, and financial disclaimer.
Summary
Ledger reported that hardware wallets sold by reseller CryptoBilis were implanted with LTE-enabled spy devices that captured users' 24-word recovery phrases from the device screens and transmitted them via cellular networks. The implants used a microcontroller and embedded SIM to send data, but did not compromise the wallet’s security chips or transaction processes. Ledger confirmed one implanted device and is investigating possible additional cases beyond CryptoBilis.
Why it matters
This development highlights a serious physical security threat to hardware wallets, potentially exposing millions of users' private keys and leading to significant crypto losses. The incident raises concerns over supply chain integrity and reseller trustworthiness. Ledger, along with other brands like Trezor and OneKey, has taken measures against CryptoBilis, suggesting wider implications for hardware wallet distribution and user safety.
Key context
The implants were first uncovered following reports of crypto losses from devices sold by CryptoBilis, an authorized reseller in Indonesia, Malaysia, and the Philippines. Ledger has sold over 8 million hardware wallets globally, which secure private keys offline. Blockchain and cybersecurity investigators estimate losses between $86 million and $103 million, though Ledger has not confirmed totals. Reports also emerged of implants found in devices allegedly purchased from MediaMarkt stores in Europe, currently under investigation.
Key numbers and entities
Ledger Donjon (Ledger’s security research team), CryptoBilis (reseller), Specter (blockchain investigator), Yfarmx (cybersecurity outlet), Trezor, OneKey, MediaMarkt. Estimated losses: $86 million to $103 million. Ledger hardware wallets sold: over 8 million. OneKey replacement offer deadline: December 31, 2026.
What remains unclear
The exact scale and geographic extent of the implant distribution remain uncertain. Ledger has not confirmed whether implants found in European MediaMarkt purchases are connected to the CryptoBilis case. The full amount of crypto losses has not been officially verified by Ledger. Details on how the implants were introduced into the supply chain are yet to be disclosed.