TL;DR: Ledger is urging resellers in seven Asian markets to halt sales of its hardware wallets after a suspected $86 M theft tied to tampered devices, yet the company admits the losses are unverified and confined to a single regional reseller.
The Details
Ledger announced a voluntary pull‑back of its devices in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong while it investigates hidden LTE implants that allegedly read recovery phrases. The only confirmed incidents involve devices sold through CryptoBilis in Southeast Asia; a separate report from Germany triggered MediaMarkt Saturn to stop sales, but no funds were lost there. Ledger’s Donjon team identified the implant’s functionality, and on‑chain analyst Specter traced over $86 M in suspected thefts – a figure the company has not independently verified. The firm stresses that its own infrastructure and direct sales channels appear uncompromised, but it has not pinpointed who altered the wallets or where in the supply chain the breach occurred.
Watch For
- Evidence that the implant is present in devices outside the listed regions, which could broaden the fallout.
- Regulatory or legal actions against CryptoBilis or the supply chain participants.
- Ledger’s response timeline and any announced remediation steps, which will affect market confidence in hardware wallets.