Skip to content
ENTITY PROFILE / KNOWLEDGE GRAPH

Ledger

RSS

Ledger discovered unauthorized spy implants in some Ledger Flex devices sold by CryptoBilis, stealing users’ 24‑word recovery phrases via LTE. The implant was found on Oct 10 by Ledger’s security team. Singapore police reported that at least two tampered wallet cases were filed on Sept 10, with combined losses of about 3.5 million SGD ($2.7 M). Ledger halted CryptoBilis sales and suspended sales of Ledger devices in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong. Ledger reviews its distribution chain and notes its Genuine Check cannot detect implants if the security chip remains intact. Mark Karpelès alleged Ledger could have prevented losses with clearer warnings and criticised early implant warnings. Ledger ISSUES_ALERT CryptoBilis supply chain Singapore Police Force REPORTS Ledger Ledger confirmed an unauthorized hardware implant in a CryptoBilis‑sold Ledger device Ledger Donjon security team found a hardware implant in Ledger devices sold through CryptoBilis. Chainalysis analyzed the loss of more than 60 BTC from a scammer using Ledger devices.· Entity summary generated by Graphiti

RELATIONS
80Relations
CURRENT
73Current
EVENTS
12Events
REPORTS
30Source reports
KNOWLEDGE ATLAS0 entities · 0 relations
No public neighbors yet
Explore all published links of a node; previously discovered relations remain visible.

Relation timeline

BY VALID-FROM DATE
  1. Ledger's Donjon security teamFOUND IMPLANT INLedger

    Ledger Donjon security team found a hardware implant in Ledger devices sold through CryptoBilis.

    Current1 sourceLedger's Donjon security team
  2. ChainalysisANALYZEDLedger

    Chainalysis analyzed the loss of more than 60 BTC from a scammer using Ledger devices.

    Current1 sourceChainalysis
  3. LedgerFOUND IMPLANT INLedger hardware wallet

    Ledger confirmed an unauthorized hardware implant in a CryptoBilis‑sold Ledger device

    Current1 sourceLedger hardware wallet
  4. Singapore Police ForceREPORTSLedger

    Singapore Police Force REPORTS Ledger

    Current1 sourceSingapore Police Force
  5. LedgerSENDSLedger hardware wallet

    Ledger sent a new Ledger hardware wallet to a user after the tampered device incident.

    Current1 sourceLedger hardware wallet
  6. Singapore Police ForceIN CONTACT WITHLedger

    Singapore Police Force is in contact with Ledger.

    Current1 sourceSingapore Police Force
  7. LedgerISSUED WARNING ONPHP

    Ledger issued a warning about PHP vulnerabilities

    Current1 sourcePHP
  8. Mark KarpelèsSAID ABOUTLedger

    Karpelès said that Ledger’s early implant warnings deserved more action.

    Current1 sourceMark Karpelès
  9. Mark KarpelèsNOTIFIEDLedger

    Mark Karpeles notified Ledger of spyware found in tampered ledgers

    Current1 sourceMark Karpelès
  10. LedgerUNVEILEDRJ Scaringe

    Ledger unveiled its new device Atom

    Current1 sourceRJ Scaringe
  11. LedgerFOUND SPY IMPLANT INCryptoBilis

    Ledger found an unauthorized hardware “spy” implant in a device sold by the Southeast Asian reseller CryptoBilis, resulting in losses of about $93 million.

    Current1 sourceCryptoBilis
  12. HackenREPORTS ONLedger

    Hacken reported that Ledger discovered the spy‑implant incident in a device sold by CryptoBilis.

    Current1 sourceHacken
  13. LedgerACKNOWLEDGES LIMITATION OFAgentic Wallets

    Ledger acknowledges that its Genuine Check cannot detect implants if the original security chip remains intact

    Current1 sourceAgentic Wallets
  14. LedgerHALTED RESELLER SALESCryptoBilis

    Ledger halted CryptoBilis reseller sales

    Current1 sourceCryptoBilis
  15. Ledger hardware walletISSUED BYLedger

    Ledger hardware wallet was issued by Ledger

    Current1 sourceLedger hardware wallet
  16. Mark KarpelèsEXPECTED HIGHER STANDARDSLedger

    Mark Karpelès expected higher standards from Ledger based on Mt. Gox experience

    Current1 sourceMark Karpelès
  17. Mark KarpelèsCLAIMEDLedger

    Mark Karpelès claimed Ledger could have prevented losses with clearer warnings

    Current1 sourceMark Karpelès
  18. Mark KarpelèsACCUSEDLedger

    Mark Karpelès accused Ledger

    Current1 sourceMark Karpelès
  19. Mark KarpelèsCLAIMED AWARENESS OF IMPLANTSLedger

    Mark Karpelès claimed Ledger knew about implants as early as March 6

    Current1 sourceMark Karpelès
  20. ChainalysisMENTIONEDLedger

    Chainalysis mentioned Ledger in its report on a theft that affected Ledger devices purchased through CryptoBilis

    Current1 sourceChainalysis
  21. LedgerRUNSTim Sweeney

    Ledger RUNS Ledger OS

    Current1 sourceTim Sweeney
  22. LedgerTIED CONFIRMED LOSSES TOCryptoBilis

    Ledger tied all confirmed Bitcoin losses to devices sold by reseller CryptoBilis.

    Current5 sourcesCryptoBilis
  23. Ledger spy-chip exploitAFFECTSLedger

    Ledger spy‑chip exploit affects Ledger hardware wallets

    Current1 sourceLedger spy-chip exploit
  24. LedgerUSES PAYMENT PROCESSORGlobal-e

    Ledger uses Global‑e as its payment processor

    Current1 sourceGlobal-e
  25. Hong KongSUSPENDED SALES OFLedger

    Authorized resellers and distributors in Hong Kong have suspended their sales of Ledger devices

    Current1 sourceHong Kong
  26. Ledger AtomSOLD THROUGHLedger

    Ledger Atom is sold only through Ledger's official site

    Current1 sourceLedger Atom
  27. Solana MobilePARTNERS WITHLedger

    Solana Mobile partners with Ledger

    Current1 sourceSolana Mobile
  28. LedgerEARN REWARDS INSKR token

    Ledger earns rewards in SKR token by integrating Solana Mobile stack

    Current1 sourceSKR token
  29. Ian RogersWORKS FORLedger

    Ian Rogers works for Ledger

    Current1 sourceIan Rogers
  30. LedgerPRODUCESLedger Atom

    Ledger produces Ledger Atom

    Current2 sourcesLedger Atom
  31. LedgerINVESTIGATESAsia

    Ledger investigates tampered wallets sold in Asia

    Current1 sourceAsia
  32. Charles GuillemetIS CTO OFLedger

    Charles Guillemet is the CTO of Ledger

    Current1 sourceCharles Guillemet
  33. LedgerREQUESTED SUSPENSIONHong Kong

    Ledger requested suspension of sales from Hong Kong resellers

    Current4 sourcesHong Kong
  34. LedgerREQUESTED SUSPENSIONSoutheast Asia

    Ledger requested suspension of sales from Southeast Asia resellers

    Current3 sourcesSoutheast Asia
  35. LedgerUNVEILEDLedger Atom

    Ledger unveiled Ledger Atom

    Current3 sourcesLedger Atom
  36. LedgerPARTNERED WITHSolana Mobile

    Ledger partnered with Solana Mobile

    Current1 sourceSolana Mobile
  37. LedgerHAS FOUNDERS EDITIONLedger Founders Edition

    Ledger offers a Ledger Founders Edition

    Current1 sourceLedger Founders Edition
  38. LedgerREQUESTS RESERIVERS TO SUSPEND SALES INThailand

    Ledger requested resellers in Thailand to suspend hardware wallet sales

    Current1 sourceThailand
  39. LedgerREQUESTS RESERIVERS TO SUSPEND SALES INMalaysia

    Ledger requested resellers in Malaysia to suspend hardware wallet sales

    Current1 sourceMalaysia
  40. LedgerREQUESTS SUSPEND SALES OFCryptoBilis

    Ledger requested reseller CryptoBilis to stop sales and shipments of its devices

    Ended 2026-10-181 sourceCryptoBilis

Relations are facts Graphiti extracted from reports, not verbatim quotes. An end date means later reporting showed the relation no longer holds.

Events 12

Source reports 30