A closer look at “Ledger Exposes 'Spy' Chip in CryptoBilis Devices That Steals Wallet Keys via Mobile Networ”, exactly as the source publishes it. Hardware wallet maker Ledger has revealed how a covert chip embedded in devices sold by CryptoBilis could transmit users' master keys over mobile networks, without any changes to Ledger's own software. The disclosure marks Ledger's first public account of the vulnerability, which affects wallets purchased through the third-party reseller CryptoBilis. According to Ledger, the malicious component was added after manufacturing, meaning the devices left Ledger's facilities secure but were tampered with before reaching customers.
This supply-chain attack allowed the chip to capture and exfiltrate private keys, potentially giving attackers full access to victims' cryptocurrency holdings. The revelation underscores the risks of buying hardware wallets from unauthorized sellers, even when the original manufacturer's software remains intact. The full version stays on the original page, which this listing opens directly.