The Ledger implant: how a sealed device gave up its seed phrase
People who bought Ledger devices through CryptoBilis, an authorized reseller, began reporting empty wallets on October 9. Ledger later confirmed that an affected device contained a hidden implant that captured recovery words from its screen during setup.
The device could pass Ledger's genuine check. The implant left the secure chip untouched and read the words when the device displayed them.
This incident highlights a fundamental risk of relying on a single hardware wallet. Even when you follow every security recommendation, a compromised device can expose the only key protecting your bitcoin.
A more resilient setup removes that single point of failure by requiring multiple independent keys, ideally from different hardware manufacturers, to move your funds.
At a glance (as of October 19, 2026)
- What happened: Ledger confirmed that some Ledger devices sold through CryptoBilis, an authorized reseller in Malaysia, Indonesia, and the Philippines, contained a hidden hardware implant that stole recovery phrases during setup. MediaMarkt Saturn, one of Europe's largest electronics retailers, stopped selling Ledger devices in stores and online after a customer in Germany reported finding an implant as well.
- Who's affected: Ledger says every confirmed loss involves a device sold through CryptoBilis. It has not verified a drain from a device bought anywhere else, and it says its direct sales channel shows no sign of compromise.
- What to do: CryptoBilis buyers who set up a device should move their assets to a new device with a new seed phrase. Anyone who hasn't set one up should leave it unused and contact Ledger Support.
- Status: Ledger is still investigating who tampered with the devices and where. We'll update this post as it shares more.
Every confirmed loss traces back to CryptoBilis, an authorized Ledger reseller
On October 9, Ledger began investigating reports of drained wallets from customers who purchased devices through CryptoBilis, an authorized reseller serving Malaysia, Indonesia, and the Philippines. Ledger later confirmed that an affected device contained an unauthorized hardware implant and asked CryptoBilis to suspend sales. According to Ledger, every confirmed loss involved a device sold through CryptoBilis, with no verified losses linked to devices purchased elsewhere.
The total amount stolen remains unconfirmed. On-chain researchers estimate losses between $86 million and $93 million across more than 300 wallets, although Ledger has not independently verified those figures. The company is still investigating where and how the devices were tampered with.
The Ledger implant read the screen, so the secure chip never had to fail
Mark Karpelès, the former head of the Mt. Gox exchange, was one of the first to show what was inside. He says one Ledger he examined arrived from Malaysia in flawless shrink wrap, with extra hardware tucked where the screen's padding should be.
On October 13, Ledger's security team, Ledger Donjon, described the mechanism. The implant sits inside the enclosure and reads what the screen displays. When the device shows the 24-word recovery phrase during setup, the implant's microcontroller decodes the words and sends them out over a mobile network using an eSIM.
Anyone holding those words can restore the wallet on another device and move the funds. Ledger says the implant does not modify the Secure Element, the Ledger operating system, or the transactions a user signs. It works like a card skimmer on a real ATM, where the machine is genuine and the skimmer copies whatever passes through it.
Ledger's genuine check could still pass on a tampered device because the check confirms that the secure chip is a real Ledger chip and the implant leaves that chip untouched. Ledger calls the incident a physical supply-chain attack and says attackers did not breach its own software or systems.
Supply-chain concerns extend beyond Southeast Asia
On October 13, MediaMarkt Saturn, one of Europe's largest electronics retailers, stopped selling Ledger devices in stores and online after a customer in Germany reported finding an implant. Ledger agreed to the suspension and later said it had inspected German retail and distributor stock without finding further signs of tampering. No implant-related losses had been reported in Europe.
Meanwhile, Mark Karpelès reported finding a similar implant in a Ledger Flex purchased at Singapore's airport, although Ledger has not confirmed a connection to the CryptoBilis cases. Other hardware wallet manufacturers, including Trezor and OneKey, have also responded by tightening their reseller networks.
Timeline of the Ledger CryptoBilis incident
| Date | What happened |
|---|---|
| Oct 9 | Ledger users in Southeast Asia report drained wallets. Ledger says it is investigating reports from CryptoBilis buyers and asks CryptoBilis to pause all sales and shipments. On-chain investigator Specter estimates more than $86 million in losses. |
| Oct 10 | Ledger confirms an unauthorized hardware implant in one affected user's device. CryptoBilis stops selling hardware wallets. |
| Oct 11 | Ledger says every confirmed case involves CryptoBilis, the number of affected devices is limited, and it is working with authorities and reviewing reseller controls. |
| Oct 13 | Ledger Donjon explains how the implant works. MediaMarkt Saturn stops selling Ledger devices with Ledger's agreement after a report from Germany. Trezor announces it will cut its reseller network. Mark Karpelès reports an implant in a Ledger Flex bought at Singapore's airport, which Ledger has not linked to the CryptoBilis cases. |
| Oct 14 | Ledger says it inspected German retail and distributor stock and found no tampering, and that no implant-related losses have been reported in Europe. |
| Oct 15 | Ledger publishes its full response. It says a highly organized criminal group spent months buying genuine devices, fitting them with implants, and putting them back into distribution through resellers in Southeast Asia, and that there was no flaw in its chip, operating system, or servers. Ledger asks authorized resellers and distributors in Southeast Asia and Hong Kong to suspend sales, says every store and warehouse unit it checked was clean, and tells resellers to keep devices off shelves and never resell returns. |
| Oct 17 | Karpelès argues Ledger had earlier evidence of implants, pointing to a buying guide Ledger first published in March and updated in September. Ledger CEO Pascal Gauthier publicly disputes his criticism. |
| By Oct 18 | Chainalysis reports that one of the largest drained wallets belonged to a task scam operator, which lost more than 60 BTC. |
All dates are 2026. Last updated October 19, 2026.
What to do based on where you bought your Ledger
If you bought your Ledger directly from Ledger, there are no reports so far of a problem, and Ledger says its direct sales channel shows no sign of compromise.
If you bought from CryptoBilis and haven't set the device up, Ledger's advice is to leave it unused and contact Ledger Support. If you already set it up, Ledger says to move your assets promptly to a new device with a new recovery phrase. It also says never to enter or restore any recovery phrase on a device bought from CryptoBilis. Treat the old recovery phrase as compromised, and buy the replacement directly from the manufacturer.
Before transferring funds, verify the receiving address and consider sending a small amount first.
If you bought a Ledger from another store and want to check it, Ledger publishes a guide to inspecting the inside of the device. Opening a device can damage it, so back up your recovery phrase before you try. If you find something, Ledger says to contact Ledger Support or local law enforcement before you send the device anywhere.
The usual precautions still matter: buy directly from the manufacturer, generate your recovery phrase on the device, and keep it private. A new device should never arrive with recovery words already printed in the box, and a seed phrase never belongs in a website, an app, or a form. But the implant described here could capture words generated on the device's own screen, even if the owner followed those precautions.
Scammers are already using this story. Ledger says it will never call you, message you directly, or ask for your 24-word recovery phrase, and it warns that many claims and figures circulating online are unverified. No one from Casa will ever ask for your seed phrase either, and if someone says they represent Casa, ask for their verification code before acting on anything they say.
If you lost funds, Ledger asks you to contact Ledger Support, file a report with local law enforcement, and coordinate with police before opening the device. Save the transaction details and the receiving address, and consider contacting SEAL 911, a volunteer security response group.
What changes when spending requires more than one key
With a singlesig wallet, anyone who obtains the recovery phrase can move the funds. There's no second key required to authorize a transaction.
In a 3-key multisig vault, spending requires two of the three keys. If a tampered Ledger exposes one key, an attacker still needs another to move the funds. The owner can use the remaining keys to move their bitcoin into a new vault configuration that excludes the exposed key.
The hardware you choose matters, too. Using multiple devices from the same manufacturer can leave your keys exposed to the same vulnerability. Choosing devices from different manufacturers reduces the risk of a single flaw affecting enough keys to put your bitcoin at risk.
Why different manufacturers matter
The Coldcard incident earlier this year illustrates the risks of relying on a single manufacturer. A flaw in seed generation exposed keys even when owners kept their devices offline and stored their recovery phrases somewhere safe. A multisig vault built entirely from affected Coldcards could share that flaw across its keys.
Both incidents show why manufacturer diversity matters. A vulnerability in one device shouldn't put every key protecting your bitcoin at risk.
Coinkite shipped fixes for every affected Coldcard model on July 31, the day after the first sweep. Ledger paused CryptoBilis sales within hours of the first reports and published its technical findings four days later.
However, no firmware update can repair a seed that an affected device already generated. Our current guidance is not to use a Coldcard in a Casa vault except while migrating to a safe setup. Our Coldcard article explains the incident and how to migrate, and our Coldcard video walks through it.
How this applies to a Casa vault
A Casa 3-key vault requires two keys to spend, and the Casa Key alone cannot authorize a transaction. If Casa ever went away, Sovereign Recovery lets you move your bitcoin with your own keys. Casa supports hardware from several manufacturers, so you can choose devices with that additional separation. Our video on setting up a 3-key multi-vendor vault with a Ledger shows an example.
Casa Premium members receive hardware that Casa buys directly from the manufacturers. That still makes Casa a single source for those devices. Members who prefer to source them separately can bring their own hardware wallets, bought directly from each manufacturer.
Keeping keys on separate devices and in separate locations also helps with other problems. If one device breaks or one seed phrase backup is stolen, the remaining keys give you a way to recover or move your funds.
Multisig doesn't eliminate every risk. An attacker who obtains enough keys to meet the spending threshold can still move your funds, and setting up a multisig vault requires more effort than using a single hardware wallet.
Singlesig remains a reasonable choice for many bitcoiners, particularly for smaller balances. But as the amount of bitcoin you're protecting grows, so does the importance of reducing single points of failure. A multi-vendor multisig setup helps protect against the compromise of any one device or key.
Ledger is still investigating who tampered with these devices and where. For anyone reviewing their own setup, the practical question is how they would recover if one device exposed its key.
Our team can walk through your current setup and help you build a 3-key vault with hardware from more than one maker. Book a free security consultation.
Ledger CryptoBilis implant: common questions
Was Ledger hacked?
Ledger says attackers did not breach its software, systems, or direct sales channel. It describes the incident as a physical supply-chain attack, where someone added an implant to devices before they reached buyers.
How did the Ledger implant steal recovery phrases?
The implant sat inside the device's enclosure and read what the screen displayed. When the device showed the 24-word recovery phrase during setup, the implant decoded the words and sent them over a mobile network using an eSIM.
Did Ledger's genuine check detect the implant?
No. The genuine check confirms that the secure chip is a real Ledger chip, and the implant left that chip untouched, so a tampered device could still pass.
Is my Ledger safe?
It depends on where you bought it. Ledger has no reports of problems with devices bought directly from Ledger, and every confirmed loss involves CryptoBilis. If you bought from another reseller, Ledger publishes a guide to inspecting the inside of your device.
How much was stolen in the Ledger CryptoBilis incident?
Ledger has not confirmed the total amount stolen. On-chain researchers estimate $86 million to $93 million across more than 300 wallets, and Tether has frozen about $10 million of the stolen USDT.
What should I do if I bought a Ledger from CryptoBilis?
If you haven't set it up, leave it unused and contact Ledger Support. If you have, Ledger says to move your assets promptly to a new device with a new recovery phrase, and never to enter or restore a recovery phrase on a CryptoBilis device.
How does multisig protect against a compromised hardware wallet?
In a 3-key vault, spending takes any two of the three keys. If one key comes from a compromised device, the attacker holds one of the two keys needed. The remaining keys let you move your funds to a new vault configuration that excludes the compromised key. Mixing hardware brands helps reduce the risk of the same flaw affecting multiple keys.
Keep learning
- On Casa's blog: The Coldcard vulnerability, explained · Supply chain attacks: what you need to know · How Casa's Sovereign Recovery works · Casa Standard vs. Premium
- In our Help Center: Choosing a hardware device for your Casa vault · Casa membership levels · Replacing a key in the Casa app · What happens to your funds if Casa shuts down · Adding a Ledger to your Casa vault
- In our Wealth Security Protocol: Supply chain attack · Heterogeneous hardware and software
- On YouTube: How to set up a Ledger 3-key multi-vendor multisig vault · Coldcard vulnerability: how do you get to multisig fast?