Germany · Singapore · The Block
Ledger confirms hardware implant in CryptoBilis reseller units as MediaMarkt pauses sales in Europe
Compiled by KHAO Editorial — aggregated from 2 sources. See llms.txt for citation guidance.
◎ Multiple-sources
Ledger has confirmed that a hardware implant found inside its signers sold by Southeast Asian reseller CryptoBilis captures the 24-word recovery phrase during device setup and transmits it over LTE using a provisioned eSIM.
Key facts
- The company is offering free replacements for OneKey devices purchased through CryptoBilis between March 1 and Oct. 13, regardless of model or activation status
- Ledger has confirmed that a hardware implant found inside its signers sold by Southeast Asian reseller CryptoBilis captures the 24-word recovery phrase during device setup and transmits it over LTE
- Former Mt. Gox CEO Mark Karpelès also said Tuesday that a Ledger Flex purchased at Singapore's airport contained a spy implant
- Separately, MediaMarkt Saturn stopped selling Ledger devices in stores and online as of Oct. 13 after one customer in Germany reported an implant
Summary
The implant does not modify the device's Secure Element or Ledger operating system, or alter transactions and signatures, the company's Donjon security team said Tuesday in an X post. Ledger's update comes after the company said last week that it was investigating fund losses from users who bought its products from CryptoBilis. However, Ledger said the total remains unverified, as does the number of users affected. "Figures circulating online come from third parties and Ledger has not fully verified them," the post read.