Ledger Reveals LTE Implants in CryptoBilis Wallets Compromised Seed Phrases
Unauthorized hardware modifications in CryptoBilis wallets captured and transmitted users' recovery phrases via cellular networks.
Unauthorized hardware modifications in CryptoBilis wallets captured and transmitted users' recovery phrases via cellular networks. This is an original Token Times brief synthesising 2 outlets (Bitcoin World, Cointelegraph), plus live market data, as of Wed, 14 Oct 2026 08:00:01 UTC.
This incident highlights critical vulnerabilities in the hardware wallet supply chain, potentially compromising the security of thousands of users and undermining trust in reseller networks.
- Ledger discovered LTE implants in CryptoBilis wallets capturing seed phrases
- CryptoBilis has halted sales amid the security breach investigation
- Trezor and OneKey have severed ties with the affected reseller
- Incident raises concerns about hardware wallet supply chain security
Multiple outlets, including Cointelegraph and BitcoinWorld, report that Ledger discovered unauthorized LTE-enabled implants in hardware wallets sold by Southeast Asian reseller CryptoBilis. These implants covertly captured users' 24-word recovery phrases and transmitted them via cellular networks. While details of the security breach are consistent across sources, Cointelegraph adds that Trezor and OneKey have cut ties with CryptoBilis in response to the incident.
Ledger has disclosed a major security breach involving hardware wallets sold by Southeast Asian reseller CryptoBilis. The breach involved unauthorized LTE-enabled implants hidden within the devices that were capable of capturing users' 24-word recovery phrases.
According to reports, these implants were designed to transmit the stolen seed phrases over cellular networks, potentially compromising the security of affected users. This sophisticated attack method underscores the evolving nature of threats in the cryptocurrency space.
The incident has led to CryptoBilis suspending sales while an investigation is underway. Additionally, major hardware wallet manufacturers Trezor and OneKey have severed ties with the reseller as a precautionary measure, as reported by Cointelegraph.
This breach highlights significant vulnerabilities in the hardware wallet supply chain. It raises concerns about the potential for similar attacks and the need for enhanced security measures throughout the manufacturing and distribution process.
In the current market context, with the total crypto market cap at $2.87 trillion and overall market conditions remaining flat, this development could impact investor sentiment. 
Bitcoin is down 0.33% in the last 24 hours, and the Fear & Greed Index stands at 62, indicating a state of 'Greed' among investors.
Ledger Reveals LTE Implants in CryptoBilis Wallets Compromis — questions & answers
How were the seed phrases stolen from CryptoBilis wallets?
Unauthorized LTE-enabled implants captured and transmitted the 24-word recovery phrases over cellular networks.
What actions have been taken in response to the breach?
CryptoBilis has halted sales, and Trezor and OneKey have cut ties with the reseller.
What does this incident mean for hardware wallet security?
It underscores the need for improved security measures in the supply chain and highlights potential vulnerabilities in hardware wallet distribution.
Which outlets reported this story?
This is an original Token Times brief that synthesises reporting from Bitcoin World, Cointelegraph, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.