Ledger says 'spy' chip inside CryptoBilis Ledger devices transmitted wallet keys over mobile network
The hardware-wallet maker gave its first public account of how a covert component in devices sold by CryptoBilis could steal users’ master keys without changing Ledger’s software.
We haven't written up this one. CoinDesk has the full story — the link below goes straight to it.