By ByteBot
A hidden cellular chip inside Ledger hardware wallets sold through Malaysian reseller CryptoBilis has drained an estimated $93 million from over 300 cryptocurrency wallets — and Ledger’s own security check passed every compromised device as genuine. The implant, confirmed by Ledger on October 12, captured users’ 24-word seed phrases directly off the device screen during wallet setup and transmitted them over LTE to attacker-controlled servers. Users had no indication anything was wrong. Their wallets functioned normally. The money was simply gone.
The Security Check That Wasn’t
This is the part that should unsettle anyone who ever recommended a hardware wallet to someone else. Ledger’s Genuine Check authenticates the device’s Secure Element — the dedicated chip that stores private keys and signs transactions. The implant didn’t touch the Secure Element at all. Instead, it tapped the Serial Peripheral Interface (SPI) bus running between the Secure Element and the OLED display, a connection that transmits unencrypted, unauthenticated data. The Secure Element had no way to know it was being wiretapped. It generated a valid cryptographic proof. Genuine Check returned clean results every time.
The device was simultaneously a genuine Ledger product and a covert surveillance device. Both things were true. The flaw isn’t a bug in Ledger’s software — it’s a design assumption: that no attacker would ever have physical access to the internal components before the device reached the buyer. That assumption is now demonstrably wrong at $93 million scale.
Two Variants, One Objective
Security firm Tibane Labs analyzed two versions of the implant, obtained from different marketplaces. The first variant replaced the original battery with a smaller unit, freeing space for an ST STM32G431KBU6 microcontroller (Arm Cortex-M4, 128 KB flash), a 2×2 mm eSIM module, and a shielded LTE chip. Part numbers were scraped off to slow forensic analysis. The second, more sophisticated variant fit inside the foam padding under the OLED display, ran on the original battery, and used a professionally designed flex PCB — not hand-assembled, purpose-built.
Both variants worked identically: monitor the SPI pixel data stream, decode the 24-word recovery phrase character by character as it appears on screen during setup, then transmit it over a mobile network. Former Mt. Gox CEO Mark Karpelès was among the first to publicly document the implant after finding one inside a Ledger Flex he purchased at Singapore Airport. “The implant just monitors what’s shown on the screen,” Karpelès told CoinDesk, “will take note of the seed [phrase] as it’s shown to you, then transmit it to the attacker.”
Scope and Official Response
All 311 confirmed drained wallets trace back to devices purchased through CryptoBilis, a Malaysia-based reseller that sold Ledger hardware at nearly half the official retail price — a discount that, in retrospect, should have raised flags. According to Help Net Security, Tether froze $10 million in USDT linked to the attack. MediaMarkt Saturn halted Ledger sales in Germany after a customer there found an implanted device as well. Ledger CEO Pascal Gauthier said the company is “reviewing the controls that apply to our direct sales and to resellers,” without announcing specific technical changes.
What to Do Now
If you purchased a Ledger device through CryptoBilis or any third-party Southeast Asian reseller, the steps are straightforward:
- Uninitialized device: Do not set it up. Treat it as compromised regardless of how it looks externally or what software checks say.
- Already configured: Move all assets to a new device with a freshly generated seed phrase immediately. Do not reuse the compromised phrase on any device.
- Detection: Software checks — including Genuine Check — will not identify the implant. Physical disassembly is the only reliable detection method.
- Future purchases: Buy directly from Ledger.com only. Not Amazon, not third-party resellers, not marketplaces offering a discount.
The Lesson Extends Beyond Crypto
Hardware wallets remain significantly safer than software wallets or exchange custody for the attacks they were designed to stop — remote exploits, malware, phishing. This incident doesn’t change that calculus. What it changes is the threat model for the physical supply chain.
The unencrypted SPI connection between a secure element and a display is a pattern found far beyond crypto hardware. Payment terminals, PIN pads, hardware security modules in datacenters — any device that displays sensitive material on-screen while authenticating only one internal component carries the same structural exposure. BleepingComputer’s analysis puts it plainly: the gap between factory and end user is now an active attack surface, and no chip-level cryptography alone can close it.
Ledger needs to encrypt the SPI bus and extend attestation to cover all internal components, not just the Secure Element. Until that happens — and until Ledger’s CEO announces something more concrete than “reviewing controls” — the only safe answer is: buy direct, verify packaging, and treat any discounted hardware wallet with the suspicion it’s earned.
