Ledger Confirms Spy Implants in CryptoBilis Wallets as MediaMarkt Halts Sales Ledger’s security team has confirmed that hardware wallets sold through CryptoBilis contained unauthorised LTE implants designed to capture users’ 24-word recovery phrases during setup and transmit them remotely. The implants reportedly do not alter Ledger’s operating system, Secure Element or transaction signatures. Ledger says there is no evidence its own infrastructure was compromised, while the reported losses of more than $86 million remain unverified. Meanwhile, MediaMarkt Saturn has suspended Ledger sales across Europe after a customer in Germany reported a tampered device. Trezor has removed CryptoBilis from its reseller network, while OneKey is offering free replacements for its devices purchased through the reseller between March 1 and October 13.