Ledger Confirms Hardware Implant Behind Crypto Wallet Thefts Tied to Reseller

Hardware wallet maker Ledger has confirmed that at least one of its affected devices contained an unauthorized hardware implant, as the company investigates cryptocurrency thefts linked to a single reseller.

According to Ledger, every confirmed case involves devices distributed through the Southeast Asian reseller CryptoBilis, which has suspended hardware wallet sales while the investigation continues. BleepingComputer reported that the implanted devices drained users' cryptocurrency wallets.

Estimates of the scale of the losses vary across reports. BitKE, citing blockchain investigator Specter, put potential losses above $86 million across Bitcoin, Ether, and TRON. Decrypt referred to a suspected drain of around $87 million, while CoinDesk reported that up to $93 million had been traced, with $10 million frozen. Ledger has not confirmed a total amount stolen or the number of affected customers.