{
  "id": 14164160,
  "title": "Ledger details LTE-enabled spy implants in wallets sold by CryptoBilis",
  "url": "https://urgent.news/2026/10/13/ledger-details-lte-enabled-spy-implants-in-wallets-sold-by-cryptobilis",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-13T08:45:10.000Z",
  "source": {
    "name": "Cointelegraph",
    "slug": "cointelegraph",
    "url": "https://cointelegraph.com/news/ledger-cellular-implants-wallets-sold-cryptobilis"
  },
  "original_language": "en",
  "account": "Ledger revealed that LTE-enabled implants in wallets sold by CryptoBilis exposed users' recovery phrases. The French hardware wallet maker stated that malicious implants captured recovery phrases from device screens and transmitted them via cellular networks using an embedded SIM. Ledger Donjon's security research team discovered that the implants utilized a microcontroller to decode the 24-word phrases during setup and transmitted the data over LTE networks. The implants did not compromise the devices' security chips or alter transactions. The incident was reported after crypto losses were linked to Ledger devices sold through CryptoBilis, an authorized reseller in Indonesia, Malaysia, and the Philippines. Blockchain investigator Specter estimated losses could exceed $86 million, while Yfarmx raised the estimate to $103 million. Ledger has sold over 8 million hardware wallets, which store private keys offline and allow users to approve transactions on-device. The company advised users who suspect tampering to contact its support team and file a police report. Ledger directed concerned customers to an inspection guide, warning that opening a device could damage it and advised backing up recovery phrases first. While confirmed losses involved devices sold by CryptoBilis, Ledger is investigating other reports. A user on X claimed to have found implants in two Ledger devices purchased from European stores, but Ledger has not confirmed the connection. CryptoBilis suspended sales and shipments of all hardware wallet brands in Malaysia, the Philippines, and Indonesia, temporarily closing its physical stores and reviewing processes with independent specialists. Trezor and OneKey, which also had unauthorized implants in devices sold through CryptoBilis, terminated the reseller's authorization and offered replacements to affected customers.",
  "summary": "Ledger detailed how LTE-enabled implants exposed wallet recovery phrases as CryptoBilis halted sales and Trezor and OneKey cut ties with the reseller.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}