Ledger Halts Hardware Wallet Sales in Asia Following Discovery of Spy Chips in Reseller Units
Ledger has asked distributors in Asia to temporarily halt sales after an investigation revealed hardware spy chips secretly planted in devices sold via a reseller.
Cryptocurrency hardware wallet manufacturer Ledger has requested distributors across Asian countries to temporarily suspend sales after an investigation confirmed the presence of unauthorized hardware spy chips embedded in devices originating from reseller CryptoBilis.
Discovery of Secret Hardware Spy Chips
According to the findings, the tampering targeted devices distributed through reseller CryptoBilis. Malicious actors secretly installed a spy chip directly onto the circuit board of the Ledger devices prior to reaching end users.
The unauthorized chip was designed to intercept and record the 24-word recovery seed phrase as soon as users initialized and set up their wallets for the first time. Once captured, the extracted data was transmitted directly to hackers via an LTE cellular network.
Financial Impact and Losses
This sophisticated hardware attack resulted in massive financial losses for affected users. By gaining access to the 24-word recovery phrases, the attackers succeeded in draining funds, causing losses estimated between $86 million and $93 million in cryptocurrency.
Why This Matters
This incident represents one of the most serious hardware supply chain attacks observed in the cryptocurrency sector. Cold wallets are widely regarded as the most secure method for safeguarding digital assets against online threats. However, this breach demonstrates that even the most trusted cold storage devices can be physically modified and weaponized during the supply chain and distribution stages before reaching consumers.
What to Watch Next
Crypto investors, Ledger users, tech retailers, and hardware security professionals should monitor developments surrounding this breach closely.
- Further security advisories and remediation measures announced by Ledger.
- Recommendations regarding purchases made through third-party resellers versus direct channels.
- Ongoing scrutiny into the distribution chain of reseller CryptoBilis.
Source: The Hacker News
