Ledger says unauthorized implant found in at least one device sold by CryptoBilis
- Published
- Updated
- Since then
- 29 new reports
Ledger said it found an unauthorized hardware implant in at least one device sold through CryptoBilis and later said every confirmed Oct. 9 case traced back to that reseller, while warning users not to initialize unused devices and to move funds off initialized ones. Other hardware-wallet makers responded by tightening reseller access, and one said it had no evidence its own devices were compromised.
Key claims & sources
What it means
Hardware-wallet buyers who used CryptoBilis are the group most directly affected today, because Ledger linked the confirmed cases to that reseller and warned against initializing unused devices. Users with already initialized devices were told to move assets to new hardware and use a new recovery phrase, which changes how they handle wallets bought through that channel now.
In practice, reseller vetting has become tighter across the hardware-wallet market. Trezor removed CryptoBilis from its reseller list and said it had no indication its own devices were affected, while OneKey said it stopped accepting new distributors and set up replacements for eligible CryptoBilis buyers.
Market reaction i
The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
The Coin Republic
context
Crypto Briefing
context
Cointelegraph
context
Crypto Briefing
echo
Unchained
echo
Bitcoin Magazine
echo
Cointelegraph
echo
Unchained
echo
BeInCrypto
echo
Crypto Briefing
echo
Crypto Economy
echo
Crypto Briefing
echo
BeInCrypto
echo
Unchained
echo
Bitcoin Magazine
echo
Decrypt
echo
U.Today
echo
Coinpedia
The Coin Republic
echo
Cointelegraph
echo
BitPinas
adds
Crypto Briefing
echo
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 3.1 years ago | Mixin Network · Database Breach incident | $200M |
| 3.7 years ago | Euler Finance · Business logic flaw incident | $200M |
| 3.7 years ago | Euler V1 · Donation Attack incident | $197M |
| 4.9 years ago | Bitmart · Hot Wallet Key Compromised incident | $196M |
| 8.7 years ago | BitGrail · Improper access control incident | $195M |
4282 incidents stored · 39 were as large as this one or larger ($200M)