Ledger Confirms Implant in Wallet Sold via CryptoBilis
Ledger said at least one hardware wallet sold through authorized reseller CryptoBilis contained an unauthorized implant, as loss estimates from the supply chain attack reached $93.2 million.
Ledger confirmed that at least one hardware wallet sold through CryptoBilis, an authorized Ledger reseller in Southeast Asia, contained an unauthorized hardware implant, according to gizmodo.com. The confirmation follows an on-chain investigation by Bitquery, updated early Sunday, which estimated losses from the supply chain attack at $93.2 million taken from 315 wallets across six blockchains.
Pseudonymous on-chain investigator tanuki42 said Tether froze about $10 million of the stolen USDT. Ledger's warning comes after Mark Karpelès posted about spy implants in Ledger Nano X devices on September 16th and again on Thursday. Karpelès said two implanted Ledger units he examined came from Yahoo! Auctions in Japan and a China-based seller on Amazon Japan that shipped from Malaysia.
He explained that the implant reads the seed phrase from data sent to the screen during setup and transmits it over a cellular connection. The attack targeted the hardware wallet supply chain, affecting multiple blockchains.
Older reports and context
In August 2025, the first public report of an implanted Nano X was traced on Karpelès's research page. In 2014, Mt. Gox collapsed into bankruptcy after losing roughly 850,000 bitcoin, worth about $272 million by the end of that year, and in 2019 Karpelès was convicted of falsifying data but acquitted of embezzlement and given a suspended sentence in relation to Mt. Gox.
Quick answers
Which Ledger reseller is affected?
CryptoBilis, an authorized Ledger reseller in Southeast Asia, sold at least one wallet containing an unauthorized hardware implant.
How much was stolen in the Ledger supply chain attack?
Estimates from Bitquery put losses at $93.2 million from 315 wallets across six blockchains.
What did Mark Karpelès say about the implants?
Karpelès posted about spy implants in Ledger Nano X devices on September 16th and again on Thursday, saying they read the seed phrase during setup and transmit it over a cellular connection.