Ledger confirmed an unauthorized hardware implant in devices sold by authorized Southeast Asian reseller CryptoBilis, which stole 24 recovery words during setup via an embedded SIM card. Blockchain analytics firm Bitquery estimates attackers stole $102 million from 324 wallets across six networks. Ledger has asked resellers in Southeast Asia and Hong Kong to suspend sales and is tightening controls on returned products.