Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Key Facts
Ledger confirmed that there were unauthorized hardware implants in a device it sold through dealer CryptoBilis. The discovery is the first physical evidence obtained after the company launched an investigation on Friday.
CryptoBilis has suspended sales and shipments of all hardware wallets until the results of the investigation are released. Ledger calls on affected buyers who have not yet activated their devices to suspend operations, while users who have already activated their devices should transfer funds to new devices equipped with new mnemonics.
On Saturday, Ledger further confirmed that one of the devices involved did contain unauthorized hardware implants within the scope of its investigation into dealer CryptoBilis. Previously, the company launched an investigation the day before after receiving reports of missing funds from Southeast Asian buyers. This confirmation provides key evidence for the case to shift from an unverified loss report to a specific, confirmed method of tampering. Once the hardware module is implanted before the device reaches the buyer, the security of cold storage may still be threatened even if the user is extremely cautious about the subsequent handling of the key.
Ledger said on Friday that it was investigating reports of lost funds from users in Southeast Asia who purchased equipment through CryptoBilis, and recommended that the dealer suspend all sales and shipments as a precautionary measure.
Ledger said in an updated statement released Saturday: "Ledger can confirm that an affected user's device contained unauthorized hardware implants. As part of its ongoing investigation, Ledger is contacting affected users."
Ledger 指出，CryptoBilis 已停止所有硬件钱包库存的销售，直至调查结束。目前，该公司正与 CryptoBilis 积极沟通后续步骤，并与当局合作。同时，Ledger 对安全协作组织 SEAL 911 提供的支持表示感谢。
Ledger 强调自身系统未遭入侵
Ledger 表示，目前没有迹象表明其自身的安全基础设施、系统或服务遭到破坏，问题主要出在经销商的供应链环节。为此，Ledger 设立了专门的赏金渠道 bounty@ledger.fr，欢迎任何提供调查相关信息的人士联系。
Ledger 重申了周五发布的指导方针：过去 90 天内通过 CryptoBilis 购买设备且尚未设置的用户应暂缓使用；已经设置设备的用户应考虑将资产转移至配备新助记词的全新 Ledger 签名设备上，这是在怀疑密钥泄露后采取的标准自我托管预防措施。
公司提醒，骗子往往会利用此类事件进行诈骗，因此敦促买家仅信赖官方 Ledger 渠道。Ledger 明确表示，绝不会向任何人索要 24 位恢复短语。
