Ledger Halts Reseller Sales Over Tampered Wallets
Crypto hardware maker Ledger tells reseller CryptoBillis to pause wallet sales while it investigates reports of implanted circuit boards and $86 million in thefts.
Ledger has asked reseller CryptoBillis to pause all sales of its wallets while it investigates reports of tampered devices, according to The Verge. The move follows claims that modified wallets drained user accounts of more than $86 million in crypto.
Photos and videos posted on X and Threads appear to show a small circuit board implanted under the screen of some Ledger wallets. According to the reports, the implant intercepts screen content, including the seed passphrase shown during initial setup, and sends it to an attacker via an embedded SIM card.
Reports indicate that over $86 million worth of crypto has been stolen from hundreds of wallets. The issue appears to be a supply chain attack primarily involving users in Southeast Asia and the CryptoBillis reseller.
There is no indication that Ledger's own systems were compromised or that wallets bought directly from Ledger were affected. Ledger provided guidance on how to check whether a wallet has been tampered with.
What buyers can do
Users who bought a Ledger wallet through a reseller can consult the company's guidance for checking whether a device has been tampered with. Ledger has not said how long the sales pause at CryptoBillis will last.
Quick answers
Which Ledger wallets are affected by the tampering reports?
The reports concern wallets sold through the reseller CryptoBillis, primarily involving users in Southeast Asia. Ledger says there is no indication that wallets bought directly from Ledger were affected.
How much crypto was stolen?
Reports indicate over $86 million worth of crypto has been stolen from hundreds of wallets.
How can I check if my Ledger wallet was tampered with?
Ledger provided guidance on how to check whether a wallet has been tampered with.