Ledger 钱包疑遭植入间谍硬件，或涉 8600 万美元供应链攻击
Ledger wallet tampering suspected after reports of crypto thefts
多名 Ledger 加密钱包用户报告账户资金被盗，怀疑与经销商 CryptoBillis 及植入钱包的间谍硬件有关，涉案金额超 8600 万美元。X 和 Threads 上流传的照片和视频显示，屏幕下方夹有一块小型电路板，据称可截取屏幕显示内容（包括初始设置时显示的助记词），并通过内置 SIM 卡回传给攻击者。
A spy implant in some Ledger crypto wallets may be the root of an $86 million supply chain attack.
A spy implant in some Ledger crypto wallets may be the root of an $86 million supply chain attack.
by Terrence O'Brien
Oct 10, 2026, 4:36 PM UTC
Image: Cath Virginia / The Verge, Turbosquid
Terrence O'Brien
is the Verge’s weekend editor. He’s covered the tech industry for over 18 years and knows a thing or two about synths.
Reports have been mounting that users of the Ledger crypto wallet have seen their accounts drained, and suspicion is that it’s related to reseller CryptoBillis and a bit of spy hardware. Ledger has asked CryptoBillis to pause all sales of its wallets while it conducts an investigation.
Photos and videos posted on X and Threads appear to show a small circuit board sandwiched under the screen. The implant allegedly intercepts anything displayed on the screen, including the seed passphrase shown during the initial setup. Using an embedded SIM card, the implant then sends that information back to the attacker, who can then siphon funds from user accounts.
Reports indicate that whoever is behind the hack has stolen over $86 million worth of crypto from hundreds of wallets. There’s no indication that Ledger’s systems have been compromised or that wallets purchased directly from the company have been affected. Instead, the issue appears to be a supply chain attack primarily involving users in Southeast Asia and the CryptoBillis reseller. Ledger has provided guidance on how to check if your wallet has been tampered with.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
- Terrence O'Brien
来源：The Verge · theverge.com