Ledger urges customers to replace wallets purchased from reseller CryptoBilis after discovering hardware implants linked to losses of up to $93 million.
Ledger has ordered a halt to hardware wallet sales in seven Asian markets following the discovery of malicious implants capable of stealing recovery phrases.
Ledger hardware wallets sold by reseller CryptoBilis were found to contain LTE-enabled implants that captured recovery phrases, leading to significant user losses and a halt in sales.
PeckShield identified $3.89 million in stolen funds from compromised Ledger wallets moving to Binance, as total losses from the ongoing attack reach up to $94.5 million.
Coldcard is investigating a phishing link posted on its official X account, while also addressing the aftermath of a major exploit earlier this year.
Former Mt. Gox CEO Mark Karpeles discovered a malicious spy chip inside a sealed Ledger hardware wallet, prompting concerns over supply chain security and unauthorized reseller practices.
Ledger has suspended sales through Southeast Asian retailer CryptoBilis following reports of fund losses and an analyst's claim of $86 million in stolen assets.
Bitget is working to recover $387.5 million stolen in a September 2026 breach, with investigators linking the attack to North Korea-affiliated actors and a broader laundering network.
North Korean hackers from the WaterPlum group compromised 30,000 devices and stole $10.7 million by impersonating recruiters for crypto and AI companies.
A remote access trojan campaign has stolen over $235,000 in cryptocurrency from hundreds of victims in just 48 hours.
A North Korea-linked hacking group compromised 30,000 devices and stole $10.71 million in crypto by posing as tech recruiters.
Attackers hijacked the verified HBO Max Reddit account to deploy 108 malicious ads, stealing cryptocurrency wallet recovery phrases and credentials via the ClickFix social-engineering technique.
Blockstream has rejected ransom demands from hackers who stole 4,000 bitcoins from its Liquid network, opting to involve law enforcement to recover the remaining $46 million in assets.
Blockstream has refused to pay a bounty to hackers who exploited its Liquid sidechain, marking a departure from industry norms regarding white-hat payouts.
