Reports have emerged suggesting that some Ledger hardware wallets may have been compromised by physical tampering. Users have reported unauthorized drains of their cryptocurrency assets, leading to suspicions that the devices were modified before reaching the end consumer. The focus of the investigation is a third-party reseller named CryptoBillis.

Evidence circulating on social media platforms, including X and Threads, features images and videos of a small circuit board allegedly hidden beneath the wallet’s screen. According to these reports, the device is designed to intercept sensitive information, such as the seed passphrase displayed during the initial setup process. The modified hardware reportedly uses an embedded SIM card to transmit this stolen data to an external party. In response to these allegations, Ledger has officially requested that CryptoBillis pause all sales of its products while the company conducts a formal investigation into the matter.