Twitxy Saved

Ledger Support

Verified account Ledger

@Ledger_Support

Official @Ledger Support Account

support.ledger.com

⚠️Beware of scams - Ledger will NEVER ask you for your 24-word recovery phrase or DM or call you
Paris, France support.ledger.com/contact-us Joined August 2019
6 Following 77K Followers 64K Posts

Latest posts 5

Pinned post

Ledger Support Verified account @Ledger_Support
Situation Update: Ledger can confirm that one of the impacted users’ devices contained an unauthorized hardware implant. Ledger is reaching out to impacted users as part of the ongoing investigation. If you have information regarding the investigation, please reach out to Ledger’s bounty program: bounty@ledger.fr. As a measure of precaution CryptoBilis confirmed it has ceased sales of all hardware wallet inventory until the investigation is concluded. Ledger is in active communication with CryptoBilis on next steps.

Ledger is working with the appropriate authorities to bring the bad actors to justice, and thanks @SEAL_911 for their collaborative support on the investigation. We have no indication that Ledger’s security infrastructure, systems or services have been compromised. As a reminder, Ledger recommends users who purchased a Ledger device from this reseller to not initiate set up if they have not yet done so. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with a new seed).

Security is a constantly evolving landscape; Ledger is continuously adding security mitigations and is working on further, enhanced anti-tampering solutions.

Scammers often try to take advantage of incidents like this. Rely only on official Ledger channels for updates, and remember: Ledger will never ask for your 24-word recovery phrase.

For assistance or questions, contact Ledger customer support through our official channels: support.ledger.com
273 replies 392 reposts 1.8K likes 536K views View on X
Ledger Support Verified account @Ledger_Support
We really appreciate everyone looking out for the community and being vigilant. Ledger Customer Support is helping users across all available channels answering questions and concerns. We're here to help.

While it's great see people being proactive, please send questions about your device directly through official Ledger Support (support.ledger.com/contact-us). That way, our team can verify details one-on-one.

If you haven't seen it yet, here's the latest update: x.com/Ledger/status/…

Always remember: Rely only on official Ledger channels. Ledger will never call you, DM you, or ask for your 24-word recovery phrase. If someone does, it’s a scam. Stay cautious and Clear Sign transactions whenever possible.
Ledger @Ledger Oct 13
Update from Ledger Donjon on the CryptoBilis investigation 🔽

@DonjonLedger is investigating Ledger signers sold by CryptoBilis, a reseller in Southeast Asia, that contained an unauthorized hardware implant. Ledger confirmed this on October 10th for one affected user's signer. All confirmed fund losses tied to the incident disclosed on October 9th involve signers sold through CryptoBilis. We have not verified a drain linked to a signer bought elsewhere. CryptoBilis has confirmed it stopped selling Ledger signers while the investigation continues.

Based on the Donjon's analysis of the attack, the implant sits inside the enclosure and reads the data shown on the screen. During setup, the signer displays the 24-word recovery phrase. When the implant detects these screens, its microcontroller decodes the words and transmits them over LTE using a provisioned eSIM. The implant is a separate component. It does not modify the Secure Element or the Ledger operating system, and it does not alter transactions or signatures.

The Donjon will analyze the signers it receives and will share more as the investigation continues.

We have not confirmed the total number of affected users or the total value lost. Figures circulating online come from third parties and Ledger has not fully verified them. If your funds were drained and you have not contacted us, please do so through Ledger Support so we can include your case. We are also reviewing reports of implants in other signers and locations. We will continue to share information as the investigation progresses. Rest assured the Ledger team is going above and beyond to leave no stone unturned to investigate this situation to the strongest possible outcome.

If you bought a Ledger signer from CryptoBilis and have not set it up, do not set it up and contact Ledger Support. If you have set it up, transfer your assets promptly to a new signer with a new recovery phrase. Do not enter or restore any recovery phrase on a signer bought from CryptoBilis. Never enter your recovery phrase into a website, app or form.

If you lost funds or hold a tampered signer, contact Ledger Support at support.ledger.com and file a report with local law enforcement. Do not send the signer to anyone before speaking with Ledger Support or local law enforcement. If you lost funds, coordinate with law enforcement before opening the signer. Researchers and others with relevant information can write to security@ledger.com.

If you did not buy from CryptoBilis and want to inspect the inside of your signer, the guide is at support.ledger.com/article/440438…. Use caution and make sure your recovery phrase is backed up first, because opening a signer can damage it.

Ledger will never call you, message you directly, or ask for your 24-word recovery phrase. We will update this post when we verify new information.
View quoted post on X
34 replies 12 reposts 148 likes 28K views View on X
Ledger Support Verified account @Ledger_Support
Ledger is investigating reports of loss of funds from users in South East Asia who purchased products from a reseller named CryptoBillis. As a precaution, and pending the results of our investigation, we have asked CryptoBilis to pause all sales and shipments of Ledger devices. We recommend Ledger users who purchased from this reseller in the last 90 days to not initiate set up if you have not done so yet. If you have set up your Ledger device, consider moving assets to a new Ledger signer (with new seed). We will continue to inform customers of updates as the investigation progresses.

Reach out to Ledger customer support through official channels with any questions: support.ledger.com
1.2K replies 1.7K reposts 7.2K likes 4.7M views View on X
Ledger Support Verified account @Ledger_Support
Stader Labs has announced they are sunsetting BNBx (their BNB staking product). While the service is currently accessible through the Discover section in Ledger Wallet, users are advised to unstake their BNBx positions by April 15.

After that date, withdrawals will no longer be available via the Stader Labs dApp in Ledger Wallet.

Learn more here: support.ledger.com/article/103449…
or directly via Stader Labs official communication: staderlabs.com/blogs/sunsetti…
11 replies 14 reposts 43 likes 50K views View on X