Progress on Ledger’s Update Implant Attack Incident: Limited Number of Affected Devices, All Confirmed Cases Tied to CryptoBilis

Hardware wallet manufacturer Ledger has issued a 72-hour update on the hardware implant attack incident, stating it is cooperating with relevant authorities to continue the investigation. The number of affected devices is limited, and Ledger has proactively contacted affected users. All confirmed cases linked to the theft incident disclosed on October 9 involve devices sold via Southeast Asian dealer CryptoBilis. Ledger emphasized that its own systems and direct sales channels remain unaffected, and CryptoBilis has confirmed it has ceased all hardware wallet sales. Ledger advises users who purchased devices from CryptoBilis: do not initialize uninitialized devices; if already set up, transfer funds to a new recovery seed. Those with concerns can reach out via Ledger’s official website support channels, as the support team is available 24/7. Ledger also reminded authorized dealers and distributors to only source products from authorized channels, never re-list returned items, and advised users against purchasing from unauthorized dealers. The company stressed that its official team will never proactively call, send direct messages, or request the 24-word recovery phrase.