Crypto News
Ledger confirmed an unauthorized hardware implant in a wallet sold by its official reseller CryptoBilis. The supply-chain attack drained $92.9 million from 311 wallets, according to the report.
Why it matters
Self-custody puts control of funds in users’ hands, but it does not eliminate risks tied to how wallet hardware is sourced and sold. A compromised device can undermine security before a user even begins managing assets.
Market impact
CryptoBilis has stopped selling all hardware wallets, including products from Ledger, Trezor, Tangem and SafePal. The incident puts supply-chain integrity and reseller oversight in focus for hardware-wallet makers and users.
Frequently asked questions
-
Where was the unauthorized hardware implant found?
Ledger confirmed an unauthorized implant in a wallet sold through its official reseller CryptoBilis.
-
How much was drained in the supply-chain attack?
The attack drained $92.9 million from 311 wallets.
-
What action did CryptoBilis take after the incident?
CryptoBilis stopped selling all hardware wallets.
-
Which other hardware-wallet brands were included in the sales halt?
CryptoBilis halted sales of Trezor, Tangem and SafePal hardware wallets, along with Ledger products.
-
Why does the incident matter for self-custody?
Self-custody does not eliminate supply-chain risk. Compromised hardware can put wallet security at risk before users take control of their funds.
CoinTelegraph
WuBlockchain
CoinDesk
CryptoSlate
Lookonchain