I never got into crypto, but when I was considering doing so I was pretty quickly convinced that I should use a hardware wallet to store my private keys, as these are usually considered to pose less of a risk of being hacked and stolen than storing everything online. But alas, it seems one of the most reputable hardware wallets on the market has fallen victim of a supply chain attack (via a reseller) that's reportedly left some users short of a tidy collective sum of at least $86 million and, according to YFarmX's calculations, potentially over $100 million.

Ledger, the hardware wallet maker in question, has since said that as part of its investigation into the reports of stolen crypto, it can indeed confirm that "one of the impacted users' devices contained an unauthorised hardware implant."

The company also says, "To date, all confirmed cases related to the disclosed draining incident of Oct 9th, 2026, involve devices sold through the Southeast Asia reseller CryptoBilis."

Ledger says CryptoBillis confirms it has ceased all sales of the wallet until the ongoing investigation is concluded. The company also says it is "working with the appropriate authorities to bring the bad actors to justice."

" This implant, at least according to some reports , sat behind the screen where its padding should be. Importantly, the implant seems to be soldered and takes information from the screen, thereby avoiding the usual hardware tampering detection in the device.

Source link