Ledger Confirms Recovery Phrase Implant in CryptoBilis Devices, Onchain Losses Estimated at $86M

Ledger confirmed that a hardware implant in devices sold by CryptoBilis captures the 24-word recovery phrase during setup and sends it over LTE via eSIM. It does not modify the Secure Element or alter transactions. Onchain researchers estimated losses over $86 million across Bitcoin, Ethereum and Tron. Ledger says the total is unverified. Trezor and OneKey revoked CryptoBilis authorization.