Your hardware wallet had a passenger.
Ledger has confirmed that unauthorized hardware implants were found inside some of its devices sold through CryptoBilis, a Southeast Asian reseller. The implants read seed phrases off the screen during wallet setup and sent them out over a cellular connection. Hundreds of wallets were drained. The running total is over $86 million.
Ledger says its software and internal systems were untouched. That detail matters more than it sounds. This was not a bad firmware update or a compromised build server. Someone physically opened boxes, added a component, and closed them again before the product reached a buyer.
Why this one hits different for anyone who reviews tools
I test tools for a living. I run them, break them, read the docs, check the permissions, poke at the API. The whole premise of what I do is that you can evaluate a thing by using it.
This attack sits completely outside that process. Every review methodology I have, and every one I have read from people better at this than me, assumes the unit in your hands is the unit the manufacturer shipped. Firmware checks pass. Attestation passes. The screen shows what it should. The device works exactly as designed, and it still hands your recovery phrase to a stranger, because the thing stealing it is not part of the design at all.
There is no version of my test suite that catches a cellular radio glued inside a plastic shell. I would have given that device a clean write-up.
The seed phrase was always the soft spot
Hardware wallets exist to keep private keys off internet-connected machines. The one moment that promise is structurally weakest is setup, when the device displays your recovery words on a screen so you can write them down. That is the single point where the secret becomes visible in plaintext, by design, because there is no other way for a human to back it up.
The implants targeted exactly that moment. Not the encryption. Not the signing. The one step where the system has to trust the room you are standing in.
What this changes about buying tools
Ledger has asked CryptoBilis to stop selling its wallets and is working with authorities to find who was behind it. Useful, but reactive. The practical lesson for anyone assembling a toolkit is more boring and more annoying:
- Where you bought it is part of the product. Same model, same firmware, different reseller, different risk. Treat the purchase channel as a spec, not a footnote.
- Buy direct where the stakes are high. For anything holding keys, credentials, or money, the discount from a third-party reseller is not worth the unknown chain of custody.
- Marketplace listings hide the chain. “Sold by” and “shipped by” are often two different entities, and neither is the manufacturer.
- Generate secrets where you can see them. If a device shows you a seed phrase, assume the display is the attack surface and the room is part of the threat model.
- Software guarantees stop at the case. Verified firmware says nothing about what else is on the board.
The uncomfortable part
I spend a lot of time telling readers that trust should be earned through testing, not marketing. This is a case where testing could not have earned it. The honest answer is that for physical hardware, some of your safety comes from the supply chain, and you mostly cannot verify the supply chain yourself.
That is a weird thing to admit in a review blog. But pretending otherwise would be worse. I would rather tell you the limits of what a review can establish than let you read a clean score as a guarantee of physical integrity.
What I’d actually do
If you bought a hardware wallet from a reseller and you are reading this with a sinking feeling, move your funds to a wallet generated on a device you bought direct and set up yourself. A new seed phrase, not the old one. If the old phrase ever appeared on a screen that may have been watched, it is burned.
For everything else in your toolkit, this is a reminder that the trust chain has more links than most of us audit. We check code signatures and dependency trees and think we have covered it. Then someone shows up with a soldering iron and a shipping label.
The software side of security has gotten genuinely good. The cardboard box it arrives in has not.
🕒 Published: