Approximately $90 million or more in reported crypto losses have been linked to tampered Ledger devices sold through the CryptoBilis reseller in Southeast Asia. The devices contained physical implants capable of capturing recovery phrases during setup and transmitting that information to attackers. Ledger stated its own systems were not compromised and instructed affected customers to move funds to newly generated recovery phrases using trusted equipment. The exact loss figure remains an estimate and a complete count of affected units has not been publicly established. The incident highlights supply chain risks for security devices, with provenance and physical integrity now requiring as much attention as firmware version and backup discipline.
Source: Read the original article
