$86M Ledger Theft Reveals Manual Solder Implants in Authorized Reseller Chain
A supply-chain implant in Ledger signers sold via CryptoBilis extracted seed phrases over LTE, enabling $86M in thefts. Evidence shows physical modification without firmware changes, contrasting official and on-chain loss estimates. The case highlights distribution-chain risks for offline crypto hardware and points to expanded audits ahead.
Ledger will need to expand tamper-evident packaging and third-party distribution audits. Users should treat any device bought outside official channels as potentially compromised until verified through physical inspection and seed migration. Regulatory filings from affected exchanges may surface additional loss figures within the next quarter.
Ledger: Distribution audits will identify at least two additional resellers with physical implants by end of Q1 2025
Sources (3)
- [1]Primary Source(https://www.securityweek.com/86-million-crypto-heist-linked-to-ledger-signer-hardware-implant/)
- [2]Supporting Source(https://ledger.com/blog/security-update-cryptobilis-incident)
- [3]Supporting Source(https://specter.xyz/reports/ledger-implant-oct2024)