Ledger implant disclosure prompts MediaMarkt sales halt
Ledger says an implant in CryptoBilis wallets copied recovery phrases over LTE; MediaMarktSaturn has halted sales after a German customer report.
The Crypto Today Editors2 min read
Ledger buyers can no longer purchase its hardware wallets through MediaMarktSaturn’s stores or online platforms across Europe, while customers who bought through CryptoBilis should contact Ledger support before using their device. The retailer paused sales after a customer in Germany reported an implant, and Ledger confirmed an implant in devices sold by the Southeast Asian reseller.
A recovery phrase can restore control of a wallet, so capturing it can put its funds at risk even when the device still appears to work normally.
Ledger’s Donjon security team said the implant reads the 24-word phrase from the screen during setup and sends it over LTE using an embedded SIM. The company said the implant does not alter the Secure Element, Ledger operating system, transactions or signatures, according to The Block’s report on Ledger’s findings and the sales pause.
Ledger said the number of affected users and the total losses remain unverified. Online estimates of losses above $86 million came from third parties, the company said; it has no indication its own infrastructure, systems or services were compromised.
What does MediaMarktSaturn’s pause mean for buyers?
MediaMarktSaturn removed Ledger products from stores and online platforms in all its countries as a precaution, a spokesperson told Cointelegraph. Ledger said the pause was coordinated with the company after a customer in Germany reported an implant; no funds were reported lost in that case.
The report is not confirmation that MediaMarkt devices were compromised. The Block said claims by an X user who reported implants in two devices bought from separate MediaMarkt stores had not been independently verified. Ledger later said it inspected devices from German retailers and distributors and found no signs of tampering, with no implant-related losses reported in Europe.
What should CryptoBilis customers do now?
Ledger has asked CryptoBilis to pause sales and shipments while its security team examines recovered devices. For customers who suspect they have an affected signer, Ledger advises contacting its official support; the company also said people who lost funds should coordinate with law enforcement before opening the device.
There is no confirmed price or timeline for MediaMarktSaturn sales to resume. The retailer said it was in contact with Ledger, but neither company had announced a restart date in the reporting. For now, buyers looking for a Ledger through that retailer will need to wait or check another authorized channel.