A compromised Ledger device has reopened a debate over whether bitcoin exchange-traded funds can offer safer custody than hardware wallets. The incident involved devices distributed in Southeast Asia by CryptoBilis, where an unauthorized implant captured recovery phrases during setup and transmitted them over LTE.
Ledger later confirmed that at least one affected device contained a physical implant beneath the screen. It did not alter Ledger’s operating system, transactions or signatures.
On-chain investigator Specter estimated that the losses could exceed $86 million, but Ledger has not confirmed the total stolen or the number of affected users. The company said all confirmed losses tied to the incident involved devices sold through CryptoBilis, which halted sales and shipments while the investigation continued. Ledger advised customers who bought from the reseller not to begin setup, or to move assets to a new signer using a newly generated seed if setup had already occurred.
Ledger said its infrastructure, systems and services were not compromised and characterized the incident as isolated to the reseller and its market. Separately, MediaMarkt Saturn suspended Ledger sales in Europe after a German customer reported a tampered device; no loss of funds was reported in that case.
The episode has also sharpened the custody argument around spot Bitcoin ETFs. Bitcoin analyst Plan B said his decision to move holdings into ETFs in 2025 had left him with “zero regrets” after the Ledger and Coldcard incidents. 21Shares co-founder Ophelia Snyder said large holders had been shifting self-custodied assets to ETFs for enhanced security for years, making that rationale more visible after the recent wallet problems.
Blockstream CEO Adam Back said hardware wallets can remain secure, but manufacturers need stronger threat modeling. Bitcoin security researcher Jameson Lopp likewise described self-custody as a robust option while warning that hurried, large-scale migrations could create new centralized points of failure. The verified facts leave the comparison unresolved: ETFs transfer operational custody to specialized firms, while hardware wallets keep control with the holder but expose security to device integrity, distribution channels and setup practices.