Ledger says 'spy' chip inside CryptoBilis Ledger devices transmitted wallet keys over mobile network

60-second summary
Ledger reports a covert “spy” chip inside CryptoBilis‑branded hardware wallets that silently transmitted users’ master private keys via cellular network, bypassing Ledger’s firmware. The component operates independently, extracting seed phrases without firmware changes. This breach exposes millions of assets to theft, prompting immediate device recalls and heightened scrutiny of supply‑chain security across the crypto industry.
The hardware-wallet maker gave its first public account of how a covert component in devices sold by CryptoBilis could steal users’ master keys without changing Ledger’s software.