Investigations are underway after reports of crypto thefts tied to Ledger hardware wallets. Users have reported their accounts being drained, with evidence pointing to unauthorized hardware implants in some devices. Ledger has asked CryptoBillis, a reseller, to halt sales while it probes the issue. The company confirmed that one affected device contained an unauthorized hardware implant, raising concerns about security vulnerabilities in the supply chain.
The alleged tampering involves a small circuit board installed under the screen, which intercepts data displayed during the wallet's setup, including the seed passphrase. This information is then transmitted via an embedded SIM card to the attacker, enabling unauthorized access to user funds. The breach has affected hundreds of wallets, with the stolen value exceeding $86 million. Importantly, Ledger has stated that its systems and directly purchased wallets are not compromised.
The attack appears to target users in Southeast Asia, primarily through CryptoBillis resellers. Ledger has provided guidance for users to check if their devices have been tampered with, emphasizing the need for vigilance. While the exact scope of the breach remains under investigation, the incident highlights the risks of third-party resellers in the crypto hardware space. The company is urging affected users to take immediate steps to secure their accounts.
This incident underscores the growing threat of supply chain attacks in the cryptocurrency industry. As more users rely on hardware wallets for security, the integrity of the supply chain becomes critical. Ledger’s response highlights the importance of transparency and accountability in the sector. The outcome of this investigation could have significant implications for both users and resellers in the crypto ecosystem.