Ledger wallet tampering suspected after reports of crypto thefts

Reports of cryptocurrency thefts from Ledger wallet users have raised suspicions about possible tampering involving reseller CryptoBillis. Ledger has asked CryptoBillis to pause all sales of its wallets while it investigates.

Photos and videos posted on X and Threads appear to show a small circuit board fitted beneath a wallet screen. The implant allegedly intercepts information displayed on the screen, including the seed passphrase shown during initial setup. Reports say an embedded SIM card then sends that information to an attacker, who can use it to take funds from user accounts.

Reports indicate that more than $86 million in cryptocurrency has been stolen from hundreds of wallets. The Verge reports there is no indication that Ledger’s systems have been compromised or that wallets bought directly from the company have been affected.

The issue appears to be a supply chain attack involving primarily users in Southeast Asia and the CryptoBillis reseller, according to the report. Ledger has provided guidance on how users can check whether their wallets have been tampered with. The reports do not establish who is behind the thefts.