Ledger said it had tested German retail and distribution inventory devices and found no signs of tampering; there are no related reports of financial losses in Europe. The device involved in the online exposure has not yet been submitted for testing.
The official SafePal Customer Service account said it is monitoring reports of fund losses involving Ledger devices sold by CryptoBilis, and reminded users to check device authentication, the first activation date, and the tamper-evident seal.
Ledger confirmed the presence of an unauthorized hardware implant in an affected user’s device and is contacting the user while investigating with law enforcement. Distributor CryptoBilis has suspended sales of all hardware wallet inventory.
Ledger said there is currently no indication that its security infrastructure, systems, or services have been compromised, and that the stolen funds were limited to devices sold by the Southeast Asian distributor CryptoBilis. The team is investigating the specific issue.