Ledger said it was investigating reports of an unauthorized hardware implant in wallets sold through CryptoBilis, according to an October 13 update reported by The Hacker News. The report says Ledger had not confirmed the total number of affected users or the total value lost at the time of publication.
Because the scope remains unconfirmed, organizations and individual holders should avoid treating circulating claims as a complete incident assessment. The practical signal is a supply-chain concern: hardware-security assumptions depend on a trusted purchase path and verifiable device integrity.
What users can do
- Review procurement records to identify devices obtained from the named reseller or other non-authorized channels.
- Follow Ledger’s official guidance for device checks and support contact; do not rely on unsolicited recovery or replacement messages.
- Move high-value assets only after independently verifying device and account integrity.
- Preserve purchase and device information for incident-response or vendor-support follow-up.
This report will need updating as Ledger publishes confirmed scope and remediation details.
Source: The Hacker News: Ledger report