oh my god this is worse than we thought
here's
@Ledger $86M exploits explained
> cryptobilis was a reputable and authorized Ledger/Trezor/OneKey dealer for over 4 years
> they decided to sell the company to a Chinese guy (most likely patsy for DPRK) from northern China in MARCH 2026
> the "Chinese guy" modded the devices within the supply chain itself (physical), namely Nano X devices, to contain an implant module
> ledger validity/genuineness check CANNOT detect this because hw wasn't actually tampered with, just spied on
> quoting
@MagicalTux:
" implant just monitors what's shown on the screen, will take note of the seed as it's shown to you, then transmits it to 3rd party"
> former owner chimes in on X (pic below) to say that "they were under a NDA" to not mention anything to anyone for 6 months
> they obviously didn't alert any of their partners that they were authorized to sell devices of... because NDA, duh!! its in the name!
> conveniently, funds start getting siphoned a few weeks before this magical NDA due date, and being laundered across all blockchains