LEDGER SAYS THE CRYPTOBILIS IMPLANT READ THE 24 WORDS OFF THE SCREEN AND SENT THEM OVER LTE — THE SECURE ELEMENT WAS NEVER TOUCHED — TREZOR AND ONEKEY DROP THE RESELLER

Ledger has given its first account of how the CryptoBilis implant worked. In a post on X at 06:39 UTC on October 13, 2026, Ledger said its Donjon team found that the implant “sits inside the enclosure and reads the data shown on the screen.” During setup the signer shows the 24-word recovery phrase. When the implant sees those screens, “its microcontroller decodes the words and transmits them over LTE using a provisioned eSIM.”

Ledger stressed what the implant did not do. It “does not modify the Secure Element or the Ledger operating system, and it does not alter transactions or signatures.” That is true, and it is the whole problem. The secure chip did its job. The attack went around it, to the one moment a hardware signer has to hand its secret to a human: the setup screen.

Ledger’s checks prove the chip and the firmware are Ledger’s. Nothing on the device checks what else is inside the case. Ledger’s advice to buyers outside CryptoBilis who want to be sure is a support guide for opening the signer and looking. Ledger says it has “not confirmed the total number of affected users or the total value lost” and is reviewing reports of implants in other signers and places. Per Cointelegraph, Trezor and OneKey have both dropped CryptoBilis as a reseller and report no losses of their own, and CryptoBilis has halted sales of every wallet brand in Malaysia, the Philippines and Indonesia.

A seed made on a device you cannot inspect is a seed you trusted to everyone who touched the box. Attestation answers one question, whether the chip is real. It cannot answer the question that mattered here, which is what else was soldered in next to it. At the time of this writing, bitcoin was $83,131.