Ledger has unveiled the Ledger Atom, a new device scheduled for release in mid-2027, marking a departure from traditional hardware wallets toward smartphone functionality. The Atom runs Android operating system, allowing users to install everyday applications like WhatsApp, Instagram, and TikTok while maintaining a protected mode for managing digital assets. The device incorporates integration with the AI assistant OpenClaw and enables users to switch between ordinary smartphone functionality and secure crypto management. Ledger plans to sell Atom exclusively through its own website rather than through third-party sellers, theoretically reducing exposure to distribution channels implicated in the CryptoBilis incident. The company has no plans to introduce trade-in programs for existing customers affected by the incident, though it does not rule out future upgrade promotions.
The Atom incorporates tamper-resistant enclosures, sensors, and packaging specifically designed to prevent supply-chain attacks like the recent CryptoBilis breach, even when switched off. According to CoinDesk, the tamper-detection system includes its own battery to ensure functionality even if the device is switched off. The spokesperson confirmed that "The Core protection enclosure will explicitly block the screen reader implants from this weekend's incident." The compromised wallets allegedly contained hidden chips capable of intercepting users' 24-word recovery phrases by reading signals from their screens, with attackers spending months preparing the operation to purchase genuine hardware wallets and insert custom electronic components. On-chain researchers estimate suspected losses above $93.2 million across more than 300 wallets, though Ledger has not confirmed a total amount.
CryptoBilis has suspended sales and shipments of all hardware wallet brands in Malaysia, the Philippines and Indonesia, expanding an earlier halt limited to Ledger devices. As reported by Ledger, the company confirmed one affected signer contained an unauthorized implant and that every confirmed loss in the October 9 incident involved a device sold by CryptoBilis. OneKey reported no related user losses but terminated CryptoBilis's reseller authorization, suspended onboarding of new resellers, and began reviewing its existing distribution network. Yishi Wang, founder of OneKey, also made a similar announcement, axing 95% of its resellers and pausing shipments to all resellers while reviewing third-party distributors. Ledger has sold more than 8 million hardware wallets and is examining reports beyond the reseller, while European buyers have reported finding similar modifications at MediaMarket stores. In Germany, MediaMarkt Saturn stopped selling Ledger devices through its physical stores and online platform following a reported implant in a customer's device, though Ledger stated this case had not resulted in any confirmed loss of customer funds.
Trezor, a major crypto hardware wallet maker, is cutting the number of shops allowed to sell its devices following a significant supply-chain security incident in the cryptocurrency wallet industry. According to reports from AMBCrypto, the company has decided to tighten its supply chain and cut resellers after a third-party retailer of Ledger wallets reportedly contained spyware to steal users' cryptocurrency. Chief Commercial Officer Danny Sanders announced that affected resellers lose their authorization on January 1, 2027, with Trezor stopping shipment of new stock to these partners. In a statement, Sanders described this as "a preventive step, taken out of an abundance of caution" and emphasized that "supply chain security is never finished, so we are raising the bar for every partner who continues with Trezor, with an updated legal framework and closer checks on how devices are sourced, stored, and handled."
Following the discovery, Ledger has introduced stricter reseller rules effective October 15, 2026, after attackers modified genuine hardware wallets to steal cryptocurrencies. The company has suspended authorized reseller sales across Southeast Asia and Hong Kong while investigating compromised devices, covering Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong. Ledger's investigators examined devices from retail stores and warehouses and reported no compromised units among their inspected samples, though the company did not disclose how many devices were examined. The new security requirements include retailers must stop placing Ledger devices on display shelves and counters, instead keeping products in storage areas and handing them only when purchases occur. Ledger instructed retailers to stop displaying wallets and prohibit resale of returned devices without exceptions, reminding sellers that returned devices must never be sold again. Retailers must promptly notify the manufacturer whenever customers report unusual products or potentially suspicious hardware, with Ledger tightening oversight of its authorized distribution network while the investigation continues.
