Ledger Confirms Unauthorized Hardware Implants in User Devices; CryptoBilis Halts Sales

icon MarsBit
Share
AI summary iconSummary
On October 11, Ledger confirmed on-chain evidence of unauthorized hardware implants in a user’s device. The company is reaching out to affected users and cooperating with authorities to identify those responsible. Crypto news outlet MarsBit reported that dealer CryptoBilis has suspended all hardware wallet sales pending the investigation. Ledger stated that its internal systems were not compromised and urged users to remain vigilant against scams. Those who purchased from this dealer should pause initializing new devices and consider migrating their assets using a fresh recovery phrase. Ledger will never ask for your 24-word recovery phrase under any circumstances. The company is enhancing tamper-proof solutions and advising users to download updates exclusively from official sources.

According to Huoxing Finance, on October 11, Ledger Support announced that it has confirmed the presence of an unauthorized hardware implant in a device belonging to an affected user. The company is currently contacting affected users and continuing its investigation. Ledger has appealed for tips from individuals with relevant information and stated that it is cooperating with relevant law enforcement agencies to hold those responsible accountable. As a precautionary measure, CryptoBilis has confirmed the suspension of all hardware wallet inventory sales until the investigation is complete, and Ledger is actively communicating with them regarding next steps. Ledger emphasized that there is currently no evidence that its security infrastructure, systems, or services have been compromised. For users who purchased Ledger devices from this distributor, if initialization has not yet been completed, they are advised not to begin the setup process; if setup has already been completed, they should consider transferring their assets to a new Ledger signing device generated with a new recovery phrase. Ledger stressed that security threats continue to evolve, and the company is continuously enhancing its security measures while advancing more sophisticated anti-tampering solutions. Users are also reminded to remain vigilant against scams exploiting this incident and to obtain the latest information exclusively through official Ledger channels. Ledger will never request users to provide their 24-word recovery phrase.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.