Ledger confirms an exploit caused by an unauthorized hardware implant in their devices.
Security & Exploits ·
Ledger has confirmed that an unauthorized hardware implant was discovered in at least one affected user's device, resulting in an exploit that compromised customer security. The company is conducting an active investigation and has asked impacted users to provide information through its bounty program at bounty@ledger.fr. CryptoBilis, the reseller through which the compromised devices were sold, has halted all hardware wallet inventory sales pending the investigation's completion.
In response to the incident, Ledger has advised users who purchased devices from the affected reseller not to initialize their devices if they have not yet done so. Those who have already set up their Ledger device are being recommended to migrate their assets to a new Ledger signer with a fresh seed. The company is working with authorities and has stated it has no indication that its internal security infrastructure, systems, or services were compromised by the implant.
Ledger is implementing additional security mitigations and developing enhanced anti-tampering solutions going forward. The company has warned users to rely only on official Ledger channels for updates and to disregard any requests for recovery phrases, as scammers may attempt to exploit the incident. The scope of affected devices and the full operational timeline of the implant remain unclear.