Ledger Details LTE Spy Implants in Crypto Wallets Sold via CryptoBilis
Key Facts
Ledger detailed technical specifics of LTE-enabled implants capable of exposing wallet recovery phrases from devices sold by reseller CryptoBilis. Cointelegraph reported that CryptoBilis has since halted sales following the discovery of the security breach.
Hardware wallet manufacturers Trezor and OneKey severed ties with the reseller after the breach was identified. The investigation aims to pinpoint the attack vector used in a major security incident involving significant losses, confirming physical supply chain tampering in devices handled by third-party resellers.
Latest Updates · 2
- Major·
Update: Mark Karpelès confirmed the discovery of a spyware module implanted inside a Ledger Flex device purchased at a Singapore airport. This security breach, identified on October 13, 2026, is linked to the theft of over $86 million in cryptocurrency.
- Notable·
Update: Buyer Ben Yorke identified retailer Metapod as the source of a Ledger Flex device containing a spy implant purchased at an airport. This development expands the investigation's scope to include additional retail outlets and newer device models affected by the physical supply chain tampering.