Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis
Ledger detailed how LTE-enabled implants exposed wallet recovery phrases as CryptoBilis halted sales and Trezor and OneKey cut ties with the reseller.
Ledger has published a detailed technical breakdown revealing that hardware wallets sold through third-party reseller CryptoBilis contained LTE-enabled implants capable of intercepting and transmitting wallet recovery phrases. The implants, embedded within the devices, were designed to silently exfiltrate seed phrases over cellular networks without the user's knowledge. Following the disclosure, CryptoBilis halted all sales, while major hardware wallet manufacturers Trezor and OneKey both severed their reseller relationships with the company.
The incident highlights the persistent risks associated with purchasing cryptocurrency hardware wallets through unauthorized or third-party resellers. Ledger has long advised customers to buy directly from its official website or verified partners to reduce the risk of supply chain tampering. This case represents one of the more technically sophisticated hardware-level attacks documented in the crypto security space, involving cellular connectivity to remotely extract sensitive wallet data.
The revelations carry significant implications for the broader hardware wallet industry, raising questions about supply chain integrity and reseller vetting processes. Users who purchased Ledger, Trezor, or OneKey devices through CryptoBilis are strongly advised to treat their existing wallets as compromised and transfer funds to new wallets with freshly generated seed phrases. The incident is likely to prompt stricter due diligence requirements across the industry regarding authorized distribution channels.
Investigators and affected manufacturers are expected to provide further updates as forensic analysis of the implants continues. Users should monitor official communications from Ledger, Trezor, and OneKey for guidance on next steps.
Source: Cointelegraph
