A wallet holder described in a post on X as a crypto scammer lost over 60 BTC, worth $4.8 million, after a Ledger hardware wallet was compromised.

The loss was not a one-off. It sits inside a much larger supply-chain attack on Ledger devices sold through CryptoBilis, a Southeast Asian reseller. That attack reportedly drained hundreds of wallets in one coordinated burst.

Ledger confirmed it found an unauthorized hardware implant inside at least one affected device. The implant captured the 24-word seed phrase users wrote down during setup.

It then sent those phrases out over cellular networks. A seed phrase is the master key to a wallet. Whoever holds it can rebuild the wallet anywhere and move every coin inside.

Unusual activity surfaced…