Ledger Confirms CryptoBilis Implant as OneKey Revokes Dealer

Ledger confirmed that at least one hardware wallet sold through CryptoBilis contained an unauthorized implant, while OneKey revoked the dealer’s authorization and began reviewing its wider reseller network.

The confirmed Ledger cases involve devices sold in Southeast Asia. Ledger’s systems and direct sales channels were not affected.

OneKey said CryptoBilis is no longer an authorized dealer and that new dealer additions have been halted during a review of existing resellers. Customers who bought OneKey devices through CryptoBilis between March 1 and Oct. 12, 2026, can request free replacements.

OneKey reported no confirmed theft involving its users but advised customers holding assets to move them to wallets generated with new recovery phrases.

CryptoBilis sold devices from Ledger, OneKey, Trezor, Tangem, SafePal and imKey in Southeast Asia. On-chain estimates of losses range from more than $86 million to $93.2 million across hundreds of wallets and multiple networks. Ledger has not confirmed the total, the number of affected customers or that the implant caused every reported loss.