A hardware wallet’s strongest cryptography offers little protection when an attacker can interfere with the device before its owner even switches it on. That is the uncomfortable lesson from the CryptoBilis case now facing Ledger customers in Southeast Asia.

TL;DR: Investigators have linked roughly $90 million or more in reported crypto losses to tampered wallet devices sold through a reseller channel. Ledger says its own systems were not compromised and has warned affected customers to move to newly generated recovery phrases.

The incident involves physical modifications rather than an ordinary phishing message. Reports describe implants that could capture a recovery phrase during device setup and transmit information to attackers. Once someone else possesses that phrase, they may be able to recreate the wallet without needing physical access to the device.

Ledger said confirmed cases involved wallets sold through CryptoBilis, a reseller listed in parts of Southeast Asia. It asked the reseller to stop sales and shipments while investigations continued. Customers who received affected devices were advised not to initialize them, and those already in use were told to secure funds with new credentials using trusted equipment.

The precise loss figure is still an estimate, and investigators have not publicly established a complete count of affected units. A device successfully passing an ordinary software or chip authenticity check should not automatically be interpreted as proof that no unauthorized physical component has been added elsewhere.

This attack is especially troubling because hardware wallets are bought to reduce dependence on third parties. Here, the supply chain itself became the point of exposure. For anyone buying a security device, provenance and physical integrity now deserve attention alongside firmware version and backup discipline.

Written by the News Desk and edited by Samuel Rae.

TL;DR: Ledger has introduced Atom, a new device intended to run everyday apps while keeping sensitive approvals inside its secure operating system. The Founders Edition has a $849 reservation price, with shipping estimated for 2027.

Ledger wants to move beyond the familiar USB-shaped hardware wallet. Its new Atom looks much closer to a smartphone, but the pitch is not another handset for calls and social media. It is a dedicated device for approving sensitive digital activity.

Introduced on October 15, Ledger Atom combines an app environment built around Android open-source software with Ledger OS on a separate secure chip. When an action needs sensitive approval, the company says its secure operating system takes control of the display so users can verify what they are authorizing.

That architecture is intended to matter for crypto transactions, online identity and interactions involving AI agents. As software becomes able to act on a user’s behalf, Ledger is betting that physical confirmation on a separate device will become more valuable.

The Atom also includes hardware privacy controls for its camera and microphone. Ledger has announced a $849 Founders Edition reservation price, with a refundable deposit option and an estimated shipment in the second quarter of 2027.

Prospective customers should treat that as a reservation for a product still in development, not immediate delivery of a finished device. Ledger itself says specifications, availability and timing may change.

The unveiling comes during intense scrutiny of the hardware-wallet supply chain following reports of tampered devices sold through a reseller. Atom’s design is a separate product announcement, and its promised protections will ultimately need to be judged on real hardware when it ships.

For now, Ledger is making a bigger bet: secure approval might become a category of its own, well beyond simply storing Bitcoin keys.