Ledger has confirmed that some of its hardware wallets distributed by Southeast Asian reseller CryptoBilis were compromised. These tampered devices contained a hardware implant designed to drain users' cryptocurrency. Researchers discovered that the attacker replaced the original battery with a smaller one to accommodate the malicious circuitry. The implant included a microcontroller, an eSIM for connectivity, and an LTE module to transmit stolen data. Tampered Ledger X devices were reportedly sold at a significantly reduced price. Ledger advises customers to purchase only from authorized resellers to avoid modified or counterfeit products. The company also instructed its distributors to source products exclusively through legitimate channels. Ledger's 'Genuine Check' tool can verify device authenticity but cannot detect hardware implants if the original Secure Element is untouched. This incident highlights the risks associated with unauthorized hardware distribution channels. Users are urged to exercise caution and verify their device's origin.