Ledger Confirms Supply-Chain Tampering In CryptoBilis-Sold Devices

Ledger confirmed a supply-chain hardware-tampering attack involving devices sold by Southeast Asian distributor CryptoBilis, raising security concerns for users who rely on hardware wallets to protect digital assets.

Ledger’s security team, Ledger Donjon, said all confirmed theft cases so far involve devices sold through CryptoBilis. No anomalies have been identified through other distribution channels.

Users who bought a CryptoBilis device but have not initialized it should not turn it on or complete setup, Ledger warned. Users who already initialized one should transfer their assets to a new wallet created with a fresh seed phrase.

Loss figures circulating online are third-party estimates and have not been fully confirmed by Ledger. The incident highlights the security risk created when hardware wallets are physically altered before reaching customers, even when the devices are sold through an established distribution channel.