Updated: CryptoBilis Suspends Sales of Hardware Wallets
CryptoBilis has suspended sales of all hardware wallets during an investigation. Ledger confirmed an unauthorized implant in one device and said its systems were not compromised.
Ledger and CryptoBilis: the investigation update concerns possible tampering with hardware wallets sold in Southeast Asia. The manufacturer confirmed the presence of an unauthorized hardware implant in one device belonging to an affected user. However, this is not confirmed as a widespread compromise of Ledger’s product line.
According to Ledger’s announcement, CryptoBilis has preventively suspended sales of all hardware wallets during the investigation. Ledger lists it among its official resellers for Indonesia, Malaysia, and the Philippines.
Ledger and CryptoBilis: Incident Is Expected to Be Limited to One Reseller
Ledger said that, based on findings to date, the case appears limited to CryptoBilis and its Southeast Asian market. The company also stated that its infrastructure, systems, and services were not compromised.
This clarification distinguishes the investigated reseller-related incident from an attack on the manufacturer’s services. However, it remains unknown how many devices or customers may be affected. Ledger has also not disclosed the device model, a technical description of the implant, or the scope of the possible impact.
It has also not been confirmed that the implant found caused all reported cryptocurrency thefts. External on-chain analysts estimated losses at more than $86 million, but Ledger has not confirmed this amount.
Recommendation for CryptoBilis Customers
Ledger continues to recommend that customers do not set up unused devices purchased from CryptoBilis. Users who have already set up such a device should consider transferring their assets to a new signer with a new seed phrase.
A new seed phrase is essential to this recommendation: it is the recovery credential from which access to cryptocurrency assets is derived. Simply replacing the device without creating a new seed phrase would not mean transferring assets to a new signer.
Ledger has not yet announced the number of confirmed affected devices, any hardware replacements, compensation for losses, or a specific procedure for customers. CryptoBilis has likewise not provided a statement on the origin of the inventory or measures for buyers.
What the Investigation Should Clarify
Further information should explain how the implant found functions and its possible connection to the reported losses. Confirmation of the number of affected users and devices will also be important, as will any decision by Ledger regarding replacements or compensation.
Sources
- Ledger Support – Ledger’s official announcement about finding an unauthorized implant in one affected device, customer recommendations, and CryptoBilis suspending sales.
- Ledger – Find or Become an Official Ledger Reseller – Ledger’s list includes CryptoBilis among resellers for Indonesia, Malaysia, and the Philippines.
- Cointelegraph – Quotes Ledger as saying that, based on findings to date, the incident appears isolated to CryptoBilis and its market, and that Ledger’s systems were not compromised.
Verified and updated: 10/11/2026 15:24
