Ledger confirmed that some of its hardware wallets sold through CryptoBilis, a Malaysia-based reseller operating across Southeast Asia, contained an unauthorized hardware implant that drained users' crypto. Ledger opened an investigation on October 9, asked the reseller to stop selling its devices, and says all reports of unexpected drains trace to devices sold there and that the affected volume is "limited." It advises buyers from that reseller not to set the device up, or to move funds to a new device with a new seed. Researchers had been showing the implant since September 16, saying tampered devices sold for nearly half the original price.