Right when everyone is worried about ECDSA and cryptography, a pretty wild story is unfolding around the Ledger losses.
The full story is still unconfirmed, but quite scary.
@Ledger_Support is investigating reported losses involving customers of CryptoBilis, an authorized reseller in Southeast Asia, and has asked it to pause sales and shipments.
@MagicalTux says that one possible theory here is physical spy implants hidden inside Ledger wallets that capture recovery words during setup and transmit them through an LTE chip.
He suspects a connection to the CryptoBilis losses, but hasn’t established it.
Then
@FatManTerra adds another twist: he alleges a Chinese company bought CryptoBilis and put the former owner under a confidentiality agreement preventing disclosure of the sale.
His attached screenshot shows
@PrabuArravind saying: “We have no access to CryptoBilis accounts, backend, or operations.”
This is a pretty wild story if confirmed, and highlights two things: Never buy from a reseller, even if official. Self custody will die very quickly if nothing is done