POPA ReconUpdate from Ledger Donjon on the CryptoBilis investigation 🔽
Source reports
- Update from Ledger Donjon on the CryptoBilis investigation 🔽 @DonjonLedger is investigating Ledger signers sold by CryptoBilis, a reseller in Southeast Asia, that contained an unauthorized hardware implant. Ledger confirmed this on October 10th for one affected user's signer… — @Ledger (X), Oct 13, 2026, 06:39 UTC
- The CryptoBilis investigation continues. This is a complex investigation, and as CEO, I am leading it with my Executive team. We are dedicating time and resources to explore every aspect to protect @Ledger users and find the malicious actors. Ledger and I will continue to… — @_pgauthier (X), Oct 13, 2026, 06:46 UTC
- LEDGER SAYS WALLET IMPLANTS EXPOSE RECOVERY PHRASES @Ledger says implants in CryptoBilis-sold devices transmit the 24 words over LTE. Its Genuine Check cannot rule out this tampering. Read more here… — @DefiantNews (X), Oct 13, 2026, 06:52 UTC
- Ledger의 이번 하드월렛 변조 사건 업데이트 원문 CyptoBilis는 Ledger Signer 판매 중단 화면에 시드구문이 표시될 때 데이터를 읽어 eSIM을 이용하여 LTE 통해 전송하는 방식 — Korean Alpha EN, Oct 13, 2026, 07:42 UTC
- UPDATE: Ledger details how an unauthorized implant in CryptoBilis-sold signers allegedly captured recovery phrases and transmitted them over LTE - 𝕏/@Ledger 🔗 LinkedIn · Discord · Leviathan · Source 🗺️ Ledger 🕵️ @Danicjade — Закрепи.sender, Oct 13, 2026, 08:02 UTC
- UPDATE: Ledger details how an unauthorized implant in CryptoBilis-sold signers allegedly captured recovery phrases and transmitted them over LTE - 𝕏/@Ledger 🔗 LinkedIn · Discord · Leviathan · Source 🗺️ Ledger 🕵️ @Danicjade — Rickler Feed, Oct 13, 2026, 08:02 UTC
- KARPELÈS SAYS AIRPORT-BOUGHT LEDGER FLEX HAD SPY IMPLANT @Ledger says an implant in its CryptoBilis probe read recovery phrases off screens and sent them via LTE. Confirmed losses remain tied to CryptoBilis-sold wallets, it says. Read more here… — @DefiantNews (X), Oct 13, 2026, 09:21 UTC
- LATEST: @Ledger reveals how the CryptoBilis hack worked, a covert hardware implant read users’ 24-word recovery phrases from the screen and transmitted them over LTE via an eSIM, with estimated losses of up to $93.2M across 300+ wallets. — @CoinDesk (X), Oct 13, 2026, 10:14 UTC
- Trezor Cuts Resellers After Ledger Implant Scandal Trezor is cutting its reseller network so it can check the sellers it keeps more closely. It calls the move preventive and says there is no evidence its devices were compromised. The trigger is the Ledger supply-chain attack… — Rickler Feed, Oct 13, 2026, 14:00 UTC
- Trezor Cuts Resellers After Ledger Implant Scandal Trezor is cutting its reseller network so it can check the sellers it keeps more closely. It calls the move preventive and says there is no evidence its devices were compromised. The trigger is the Ledger supply-chain attack… — AGGREGATOR, Oct 13, 2026, 14:00 UTC
Excerpts are quoted from the linked sources, which own their text.