Ledger Found One Hidden Chip; Bitquery Counts $92.9M Gone From 311 Wallets
Ledger confirmed an unauthorized chip in one device. Bitquery counted $92.9 million gone from 311 wallets.
Ledger said on October 10 that one buyer’s device held an unauthorized chip.[1] CryptoBilis has stopped selling all hardware wallets as a safety step, and Ledger is calling the buyers it can reach.[2] Ledger does not yet know if the chip caused the losses people reported.[3] Ledger found no sign its own systems or services were hacked.[4]
On October 9, Bitquery said about $92.9 million had left 311 wallets.[5] The wallets sat on Bitcoin, Ethereum, TRON, BNB Chain and Polygon.[5] Ledger has not backed that figure, the number of victims, or Bitquery’s take on who did it.[6]
What to do: if a CryptoBilis device is still in the box, do not set it up.[7] If you have used the device, Ledger says to think about moving your coins to a new hardware wallet set up with a brand-new recovery phrase.[8]
Who gains, who loses
Receipts
Ledger confirmed on October 10 that one affected customer's device contained an unauthorized hardware implant during its investigation of reported CryptoBilis-related thefts.
“Ledger Support confirmed the discovery in an official statement, saying the modified device belonged to a user affected by the ongoing investigation.”
Ledger said CryptoBilis had stopped selling all hardware wallets as a precaution while the investigation continued.
“The company said CryptoBilis had stopped selling all hardware wallets as a precaution and that Ledger was contacting affected customers while working with authorities.”
Ledger had not established whether the unauthorized implant caused the reported cryptocurrency losses.
“It has not established whether the implant caused the reported cryptocurrency losses.”
Ledger said it had found no evidence that its internal security infrastructure, systems, or services were compromised.
“The company emphasized in its latest statement that it has found no evidence suggesting its internal security infrastructure, systems or services were compromised.”
Bitquery estimated that approximately $92.9 million had been removed from 311 wallets across Bitcoin, Ethereum, TRON, BNB Chain, and Polygon.
“In an October 9 investigation, Bitquery estimated that approximately $92.9 million had been removed from 311 wallets across Bitcoin, Ethereum, TRON, BNB Chain and Polygon.”
Ledger had not confirmed Bitquery's estimated losses, victim count, or conclusions about the attacker.
“Ledger has not confirmed Bitquery’s estimated losses, number of victims or conclusions about the attacker.”
Ledger instructed customers who had not yet set up CryptoBilis-purchased devices not to begin the setup process.
“Customers who purchased a device through CryptoBilis have been instructed not to begin setting it up if they have not already done so.”
Ledger recommended that users of the affected devices consider moving cryptocurrency to a new hardware wallet initialized with a completely new recovery phrase.
“For customers who have used the devices, Ledger recommends considering a transfer of their cryptocurrency to a new hardware wallet initialized with a completely new recovery phrase.”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.