Ledger says some hardware wallets sold by Southeast Asian reseller CryptoBilis contained an unauthorized implant that captured recovery phrases from device screens and transmitted them over a mobile network. Onchain researchers estimate the CryptoBilis-linked thefts drained up to $93.2 million across more than 300 wallets, while Ledger says its software and secure element were not compromised.
