According to Cointelegraph, Ledger disclosed that wallets sold by the reseller CryptoBilis contained LTE-enabled implants capable of exposing wallet recovery phrases. Following this disclosure, CryptoBilis halted sales of the affected wallets. In response, both Trezor and OneKey terminated their business relationship with the reseller.
The implants were identified as integrating cellular connectivity functionality directly into the hardware wallets, raising concerns about unauthorized access to sensitive recovery information. Ledger’s statement emphasized that the presence of such components contradicts standard security practices for cryptocurrency wallet devices. No further technical specifications or timelines were provided by Ledger regarding removal or remediation efforts.
Trezor and OneKey publicly confirmed severing ties with CryptoBilis, citing security concerns related to third-party modifications to their hardware products. They did not specify whether affected devices already in users’ hands remain usable or require action. Neither party issued guidance on how customers could verify if their devices contain the implants.
The development follows broader scrutiny of unauthorized hardware alterations by resellers, though no regulatory investigation was mentioned. Ledger did not clarify whether CryptoBilis had knowledge of embedding these components prior to sale.
