Ledger confirmed Saturday, Oct. 10, 2026, that a hardware wallet belonging to one affected customer contained an unauthorized implant, lending credibility to suspicions of a supply chain attack involving Southeast Asian reseller CryptoBilis.