Ledger explains how a hidden component stole recovery phrases in $93M hack

2026-10-16

Ledger has confirmed that a hardware modification within its devices, sold by Southeast Asian reseller CryptoBilis, is responsible for capturing the 24-word recovery phrase during the initial setup. This captured phrase is then transmitted via LTE using an embedded eSIM.