Ledger confirms a security breach where CryptoBilis sold hardware wallets containing malicious spy chips designed to steal master keys from unsuspecting users.
Ledger has publicly acknowledged a critical security vulnerability involving covert components integrated into devices sold by third-party vendor CryptoBilis. The company confirmed that these spy chips are capable of extracting master keys from hardware wallets without requiring any modifications to Ledger's proprietary software, posing a significant threat to user asset security and the brand's reputation.
The covert component is designed to extract master keys directly from the hardware without needing to alter Ledger's software.
CryptoBilis is implicated in a major security scandal for distributing hardware wallets embedded with covert spy chips. As the vendor responsible for these compromised devices, the company faces severe operational and legal risks following Ledger's public confirmation of the hardware-level tampering.
CryptoBilis sold hardware wallets that contained covert spy chips capable of stealing user master keys.
Hardware wallet manufacturer Ledger has confirmed that third-party distributor CryptoBilis sold devices embedded with malicious spy chips. These covert components are capable of extracting master keys from user wallets without triggering software-level security alerts.
The breach occurred because third-party distributor CryptoBilis sold Ledger hardware wallets that had been tampered with to include a malicious spy chip.
No, the vulnerability is hardware-based. The spy chip operates independently of Ledger's software, allowing it to steal keys without altering the device's firmware.