Ledger's Secure Element Held. The CryptoBilis Implant Read Bitcoin Seeds Off the Screen
According to Ledger, the devices drained in this incident weren't broken from the inside. Something was added to them: a separate board that watched the display during setup and sent the recovery phrase out over a cellular network.
The short version from Ledger Donjon, the company's security team, published on October 13, 2026: the implant sits inside the enclosure, reads what the screen shows, decodes the 24 words when they appear during setup, and transmits them over LTE through a provisioned eSIM [1]. "It does not modify the Secure Element or the Ledger operating system, and it does not alter transactions or signatures," Ledger said [1].
That makes this a provenance problem, not a firmware one. Two months after Coldcard's entropy bug, it's the opposite failure mode.
Confirmed vs. unconfirmed
- It opened an investigation on October 9 into reported losses from customers who bought through CryptoBilis, a Southeast Asian reseller, and asked it to stop selling and shipping devices [3].
- On October 10 it confirmed an unauthorized hardware implant in one affected user's signer [1][2].
- All confirmed losses tied to the October 9 incident involve signers sold through CryptoBilis; Ledger says it has not verified a drain linked to a device bought elsewhere [1].
- It has asked resellers and distributors in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong to suspend sales and pull stock while it investigates [4]. Who tampered with the devices, and where in the distribution chain, is still under investigation, per Ledger [4].
What hasn't been confirmed:
- The losses. Ledger says it has not confirmed the number of affected users or the total value, and that circulating figures come from third parties [1]. On-chain researchers cited by CoinDesk estimate $86 million to $93 million across more than 300 wallets on several chains, Bitcoin included [2]. According to Yahoo Finance, Bitquery counts $93.2 million across 315 wallets and YFarmX, the highest estimate, $103.4 million across 530 addresses [7]. Those are the firms' own figures, not Ledger's, which has given no official number.
- Other retailers. BleepingComputer reports that some users say they bought modified devices from a Metapod store at Singapore's airport and through MediaMarkt in Europe, and, according to The Block, MediaMarkt has suspended sales of Ledger devices in Europe [8]. Ledger says it is reviewing reports of implants in other signers and locations, without having verified them [1].
- Amazon Japan. Units examined by independent researchers were reportedly bought from third-party sellers on Amazon Japan and Yahoo! Auctions Japan [5]; Ledger says those came from third-party resellers, not Amazon itself [6].
- The model. Ledger hasn't named one publicly. Researchers cited by BleepingComputer describe the implant in a Nano X [5].
What the teardowns show
Tibane Labs, per BleepingComputer, found two variants [5]. One swapped the stock battery for a smaller cell that powers both the implant and the signer. The other kept the original battery and fit into the foam space under the display. In both, the giveaway was the antenna wire [5].
Why Genuine Check passes it
Genuine Check attests that the Secure Element is authentic. Here, it is. According to BleepingComputer, Ledger explicitly warns the check cannot detect added implants when the original Secure Element remains intact [5]. The implant never talks to the chip; it only looks at the screen.
What Ledger tells users to do
From Ledger's October 13 update [1]:
- Bought from CryptoBilis, not set up: don't set it up; contact Ledger Support.
- Bought from CryptoBilis, already in use: move your assets promptly to a new signer with a new recovery phrase. Never enter or restore a phrase on the CryptoBilis device.
- Lost funds or hold a tampered signer: contact Ledger Support and file a police report. Don't send the device to anyone first, and coordinate with law enforcement before opening it.
- Didn't buy from CryptoBilis but want to inspect it: Ledger has a guide, and warns that opening a signer can damage it, so back up your phrase first.
Ledger will never call you, DM you, or ask for your 24 words [1]. After the Coldcard entropy flaw, fake "seed checkers" did real damage, and it pays to watch for the same playbook here.
Where this leaves self-custody
Ledger says it has no indication its infrastructure, systems, services or direct sales channel were compromised [4], and it has told distributors to source only through authorized channels and not to restock returned products [2]. Trezor, per BleepingComputer, found no evidence its devices were affected but will cut its reseller network from January 1, 2027 [3].
For anyone holding bitcoin on their own hardware, the takeaway is about the box as much as the chip: fewer hands between the factory and you means fewer places to add a board. Where you buy matters as much as where and how you keep it.
For more on keeping bitcoin in your own custody, the privacy and self-custody section collects the rest of our coverage.
Sources
Labelled by type.
- Ledger, Update from Ledger Donjon on the CryptoBilis investigation, October 13, 2026. Implant mechanism, confirmed scope, unverified figures, user guidance. (Primary, official statement)
- CoinDesk, Ledger says unauthorized implant found in at least one device sold by CryptoBilis, October 12, 2026. October 10 confirmation, researchers' loss estimate, distributor guidance. (Secondary, press)
- BleepingComputer, Ledger asks sellers across Asia to halt sales after supply-chain attack, October 14, 2026. Investigation start, Metapod and MediaMarkt reports, Trezor's decision. (Secondary, press)
- Ledger, Incident Update - Oct 13th, 2026, October 13, 2026. Sales suspension in Southeast Asia and Hong Kong; no indication of compromise of infrastructure or direct sales. (Primary, official statement)
- BleepingComputer, Ledger confirms spy chip implant behind wallet crypto thefts, October 12, 2026. Tibane Labs and Mark Karpelès teardowns; Genuine Check limits. (Secondary, press)
- Ledger, reply on the Amazon Japan devices, October 14, 2026. Clarifies they came from third-party resellers. (Primary, official statement)
- Yahoo Finance, Ledger Says All Confirmed Cases Trace to Reseller CryptoBilis, Gives No Loss Total, October 2026. Bitquery and YFarmX estimates ($103.4 million across 530 addresses). (Secondary, press)
- The Block, Ledger confirms hardware implant in CryptoBilis reseller units as MediaMarkt suspends sales in Europe, October 13, 2026. MediaMarkt sales suspension in Europe. (Secondary, press)
More in Privacy and self-custody
Last updated: October 15, 2026