Ledger Investigates Tampered Wallets After Crypto Theft Reports

Crypto theft reports prompt Ledger investigation Reports have been mounting that Ledger wallet users have seen their accounts drained, raising concerns about possible tampering with the hardware. Ledger is investigating the reports and has asked CryptoBillis to pause all sales of its wallets while it does so. The company has confirmed that “one of the impacted users’ devices contained an unauthorized hardware implant.” The reports connect the account drainings to hardware sold by CryptoBillis, although the source does not provide further details about how the implant worked or how many users were affected. Ledger’s investigation is ongoing, and its request to pause sales comes as the reported thefts draw attention to the possibility that compromised devices may be involved. The issue is also described as potentially related to an $86 million supply chain attack. That connection remains a possibility rather than a confirmed explanation in the available account. For now, Ledger’s confirmation of an unauthorized implant in one impacted user’s device is the clearest detail disclosed about the suspected tampering. CryptoBillis asked to pause wallet sales As reports of drained accounts mounted, attention turned to hardware wallets sold by CryptoBillis. Ledger asked the retailer to pause all sales of its wallets while the investigation continues. The request follows reports that users of Ledger crypto wallets had seen their accounts drained, with the suspected issue linked to tampered hardware sold by CryptoBillis. The pause is intended to stop further wallet sales as Ledger investigates the reports. The available information does not specify how many devices may be affected or how long the pause will last. Ledger has confirmed that one impacted user’s device contained an unauthorized hardware implant, but the company is still investigating the incidents. For now, the sales pause connects CryptoBillis directly to the inquiry without establishing the full extent of the suspected tampering. Ledger’s investigation is ongoing, and the reports of account losses and the implant remain under review. Ledger confirms unauthorized hardware implant Ledger confirmed that an impacted user’s device contained an unauthorized hardware implant. The company made the finding as it investigated reports of Ledger wallet users having their accounts drained. The suspected tampering has been linked to hardware sold by CryptoBillis, which Ledger asked to pause all wallet sales while the investigation continues. The confirmation establishes that at least one affected device contained an implant that was not authorized. The source does not specify what the implant did, how it was introduced, or whether it was present in other users’ devices. Ledger’s investigation was still underway, and the reports of drained accounts were part of the broader inquiry into potentially tampered hardware. Possible link to an $86 million supply chain attack The suspected implant may be connected to a much larger incident: an $86 million supply chain attack. The Verge’s report says the spy implant found in some Ledger crypto wallets may be the root of that attack, linking the suspected hardware tampering to the reported thefts from users’ accounts. Ledger has confirmed that one impacted user’s device contained an unauthorized hardware implant. The company has not, in the information reported, established that the implant caused the $86 million attack. The connection remains a possibility under investigation, rather than a confirmed explanation of how the money was taken. The suspected tampering involves wallets sold by CryptoBillis. Ledger asked the retailer to pause all wallet sales while it investigates, following reports that users’ accounts had been drained. If the implant is tied to the reported attack, the incident would extend beyond individual reports of stolen crypto and point to a potential compromise in the supply chain for the hardware wallets.