Ledger confirms unauthorized hardware implant in one user’s device; CryptoBilis suspends inventory sales

AT A GLANCE

Ledger confirmed the presence of an unauthorized hardware implant in an affected user’s device, and CryptoBilis suspended inventory sales.

Article

Ledger confirms the presence of an unauthorized hardware implant in an affected user’s device; distributor CryptoBilis suspends inventory sales

BlockBeats reports that,October 11, Ledger Support published an update stating that it has confirmed the presence of an unauthorized hardware implant in an affected user’s device. It is currently contacting affected users and continuing to investigate the matter. Ledger is calling on anyone with information to provide leads and said it is cooperating with relevant law enforcement agencies to hold those involved accountable. As a precaution, CryptoBilis has confirmed that it has suspended sales of all hardware wallet inventory until the investigation is concluded, while Ledger is actively communicating with it about subsequent measures.

Ledger said there is currently no indication that its security infrastructure, systems, or services have been compromised. For users who purchased Ledger devices from this distributor, if initialization has not yet been completed, they are advised not to begin the setup for now; if setup has been completed, they should consider transferring their assets to a new Ledger signing device using a new recovery phrase.

Ledger emphasized that security threats are constantly evolving, and that the company is continuing to improve its security measures and advance more sophisticated anti-tampering solutions. It also reminded users to beware of scams taking advantage of the incident and to obtain the latest information only through official Ledger channels. Ledger will never ask users to provide 24 words in a recovery phrase.

Original link https://m.theblockbeats.info/flash/371189

Key points

Ledger Support said it had confirmed the presence of an unauthorized hardware implant in an affected user’s device.
Ledger is contacting affected users and continuing its investigation, and said it is cooperating with relevant law enforcement agencies.
CryptoBilis has confirmed that it has suspended sales of all hardware wallet inventory until the investigation is concluded.
Ledger said there is currently no indication that its security infrastructure, systems, or services have been compromised.
Ledger advised relevant users not to initialize devices that have not yet been set up, or to consider transferring their assets to a new Ledger signing device using a new recovery phrase.
Ledger reminded users to obtain information only through official channels and that it will never ask users to provide 24 words in a recovery phrase.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

A hardware implant refers to someone adding a hardware component to a device without authorization. Ledger said it discovered that one affected device had such an implant, so distributor CryptoBilis has suspended sales of its inventory. The report also said there is currently no indication that Ledger’s security infrastructure, systems, or services have been compromised.

Why it matters to readers

This may affect users who purchased Ledger devices from CryptoBilis and the security of related inventory. Users should also beware of scams impersonating Ledger and requesting recovery phrases.

If you purchased a Ledger device from CryptoBilis, pay attention to subsequent notices from official Ledger channels; do not provide anyone with 24 words in a recovery phrase.

Risks and unknowns

The specific number of affected devices, the method of hardware implantation, and the asset risks cannot currently be confirmed.
The investigation has not yet concluded, and it remains unclear whether additional users are affected.
There is currently no evidence that Ledger’s security infrastructure, systems, or services have been compromised, but this does not mean that all risks have been ruled out.
It is not yet clear when CryptoBilis will resume selling its inventory.

Ledger confirms unauthorized hardware implant in one user’s device; CryptoBilis suspends inventory sales

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center