Ledger: Unauthorized Part in CryptoBilis Wallets Leaked Seed Phrases

The distinction Ledger draws—that its own secure element and OS were untouched—shifts the problem from a core protocol failure to a supply-chain and reseller-integrity issue, which is a harder problem to police because it sits outside the manufacturer's direct control. This matters most for buyers who acquired devices through third-party regional sellers rather than official channels, since the attack surface is physical hardware, not firmware. Whether the compromise is confined to CryptoBilis inventory or reflects a broader gap in how resold devices are verified is the open question.