Ledger Reveals Spy Chip in CryptoBilis Wallets Stealing Keys Over Mobile Network
Ledger discloses a covert chip in CryptoBilis devices that transmits users' wallet keys via mobile networks.
Ledger discloses a covert chip in CryptoBilis devices that transmits users' wallet keys via mobile networks. This is an original TLT brief synthesising 2 outlets (CoinDesk, Crypto.news), plus live market data, as of Tue, 13 Oct 2026 11:15:02 UTC.
This discovery highlights critical vulnerabilities in third-party hardware wallets, posing severe risks to user funds and trust in the broader crypto ecosystem.
- Ledger discloses a 'spy' chip in CryptoBilis wallets stealing keys over LTE networks.
- CryptoBilis devices can extract recovery phrases without altering Ledger's software.
- Investigations are underway as theft reports emerge linked to these compromised devices.
CoinDesk and Crypto.news both report that Ledger has confirmed the presence of a hidden chip in CryptoBilis hardware wallets designed to steal users' master keys and recovery phrases. The chip operates by transmitting the sensitive information over mobile networks without requiring any changes to Ledger's original software. While both outlets corroborate the core mechanism, Crypto.news specifically mentions that investigators are examining reported thefts connected to these devices, a detail not explicitly highlighted by CoinDesk.
Ledger has publicly disclosed a significant security breach involving hardware wallets sold by a third-party vendor, CryptoBilis. The company revealed that these compromised devices contain a covert 'spy' chip designed to steal users' master keys and recovery phrases.
According to Ledger, the hidden chip operates by transmitting the stolen wallet keys over mobile networks, specifically LTE, without altering the original software of the Ledger devices. This method allows the malicious component to operate stealthily, making it difficult for users to detect the compromise.
The revelation comes as multiple reports of thefts have emerged, prompting investigations into the extent of the breach. CryptoBilis devices with the embedded chip can extract sensitive information without triggering any alarms, posing a severe risk to users who may have purchased these compromised wallets.
This incident underscores the potential vulnerabilities in the supply chain of hardware wallets, which are often considered one of the most secure ways to store cryptocurrencies. The breach not only affects the immediate users of CryptoBilis devices but also raises broader concerns about the integrity of third-party vendors in the crypto hardware market.
As of now, the total crypto market cap stands at $2.88 trillion, with the overall market remaining relatively flat. 
Bitcoin has seen a slight 24-hour increase of 0.10%, while the Fear & Greed Index sits at 57, indicating a sentiment of 'Greed' among investors. The broader implications of this security breach could impact market sentiment if more incidents come to light.
Ledger Reveals Spy Chip in CryptoBilis Wallets Stealing Keys — questions & answers
How does the spy chip in CryptoBilis wallets work?
The chip steals recovery phrases and transmits them over LTE networks without changing Ledger's software.
What is Ledger doing about the compromised devices?
Ledger has disclosed the issue and investigations are underway as theft reports are examined.
How widespread is the impact of the CryptoBilis breach?
The exact scale is unclear, but multiple theft reports suggest significant risk for users of affected devices.
Which outlets reported this story?
This is an original TLT brief that synthesises reporting from CoinDesk, Crypto.news, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.
Original summary — not financial advice. This is an original TLT brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.