Ledger Says Firmware Attack Affected Limited Number of Devices

Ledger said the number of devices affected by a hardware-implant attack linked to a firmware update is limited, with every confirmed case involving wallets sold through Southeast Asian distributor CryptoBilis.

In a 72-hour update, Ledger said it is continuing to investigate the incident with relevant authorities and has contacted affected users. CryptoBilis has stopped selling all hardware wallets.

Ledger said its own systems and direct-sales channels were not affected. The confirmed cases were tied to the theft incident disclosed Oct. 9.

Users who bought a device through CryptoBilis and have not initialized it should not do so, Ledger said. Users who already completed setup should transfer their assets to a new seed, a fresh set of recovery words used to restore a wallet.

Ledger also warned authorized distributors not to resell returned products and reminded users that its support team will not call or message them unsolicited or request a 24-word recovery phrase.