Ledger confirmed a hidden LTE chip inside wallets sold by reseller CryptoBilis reads the 24-word recovery phrase off the screen during setup and transmits it over a mobile network, leaving the Secure Element and software untouched. The suspected total drain is $86 million. MediaMarkt suspended Ledger sales across Europe and Trezor cut reseller authorizations effective January 1, 2027, marking the first confirmed hardware-level supply chain attack on a major wallet manufacturer.