Ledger: Hardware Implant in CryptoBilis Units Steals Recovery Phrases as MediaMarkt Halts Sales

Ledger has confirmed that hardware wallets sold through reseller CryptoBilis were fitted with a hardware implant. The implant is designed to steal recovery phrases, Ledger says.

The Block reports the confirmation. This is a supply-chain tamper.

What we know

The tampering affects CryptoBilis reseller units. Ledger has confirmed the implant. The report does not say how many devices were affected. It also does not say when the implant was inserted or how it got there.

The implant captures recovery phrases. An attacker could then use those phrases to drain wallets. Ledger's confirmation makes this official. No numbers were reported.

Retail ripple

MediaMarkt has suspended sales of Ledger devices across Europe. The suspension follows Ledger's confirmation. The Block report does not say how long the pause will last or whether a recall is planned.

For now, the suspicion is tied to CryptoBilis units, not necessarily devices sold directly by Ledger. The report does not name any individual victims.

The report did not include a timeline for a fix. This is a developing story.

The takeaway: Hardware wallets are only as secure as the hands they pass through.