Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger halts sales in Asia after discovering tampered crypto wallets with spy chips.
Run Ledger?
Get an email when a reviewed story names Ledger, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Ledger has requested resellers in Southeast Asia and Hong Kong to halt sales of its cryptocurrency wallets due to a supply-chain attack. Devices sold by CryptoBilis were found to have hardware implants that steal seed phrases via an LTE connection. While Ledger's core systems remain secure, the company is investigating further reports of compromised devices from other Asian and European retailers.
The lesson from this incident
Full lessonMalicious actors tampered with Ledger cryptocurrency wallets during distribution, embedding hardware implants that exfiltrate seed phrases — the master keys to users' crypto assets — over LTE connections. This attack demonstrates that even a manufacturer with secure core systems can be undermined by a compromised distribution partner. The breach highlights how hardware supply chains are a high-value, often under-scrutinized attack surface. When physical devices pass through third-party resellers without integrity verification, end users have no reliable way to detect tampering before use.
What helps against this
How we list vendors- Breach and attack simulation
You only find out whether your security tools stop an attack when a real attacker tries.
- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
- malware — spy chip implant