Ledger is investigating the breach's link to a Southeast Asian reseller named CryptoBilis and has ordered the firm to halt all sales and shipments of its devices. The manufacturer warned customers who bought devices from the reseller in the last 90 days to avoid initializing them or to migrate assets to a new signer. While Binance founder Changpeng Zhao characterized the incident as a localized supply chain attack involving tampered devices, some security researchers suspect the attackers used physical spy implants to steal seed phrases.
