The Hood Labs 🧪

Ideas in → Experiments out 🧪
Welcome to the Lab.
@RobinhoodApp

[The Hood Labs 🧪 @TheHoodLabs]

@ledger should GROW A PAIR and make some official announcements to PROTECT THEIR CUSTOMERS!

IMPLANTS ARE CONFIRMED in many devices (NOT ONLY NANO X) and FROM DIFFERENT RESELLERS!!

They’re trying to lull you with Cryptobilis while OTHER RESELLERS have been IDENTIFIED AND CONFIRMED.

Absolute disgrace that Ledger still hasn’t communicated 24 hour later!

Shame on you.

[Ledger @Ledger]

Update from Ledger Donjon on the CryptoBilis investigation 🔽

@DonjonLedger is investigating Ledger signers sold by CryptoBilis, a reseller in Southeast Asia, that contained an unauthorized hardware implant. Ledger confirmed this on October 10th for one affected user's signer. All confirmed fund losses tied to the incident disclosed on October 9th involve signers sold through CryptoBilis. We have not verified a drain linked to a signer bought elsewhere. CryptoBilis has confirmed it stopped selling Ledger signers while the investigation continues.

Based on the Donjon's analysis of the attack, the implant sits inside the enclosure and reads the data shown on the screen. During setup, the signer displays the 24-word recovery phrase. When the implant detects these screens, its microcontroller decodes the words and transmits them over LTE using a provisioned eSIM. The implant is a separate component. It does not modify the Secure Element or the Ledger operating system, and it does not alter transactions or signatures.

The Donjon will analyze the signers it receives and will share more as the investigation continues.

We have not confirmed the total number of affected users or the total value lost. Figures circulating online come from third parties and Ledger has not fully verified them. If your funds were drained and you have not contacted us, please do so through Ledger Support so we can include your case. We are also reviewing reports of implants in other signers and locations. We will continue to share information as the investigation progresses. Rest assured the Ledger team is going above and beyond to leave no stone unturned to investigate this situation to the strongest possible outcome.

If you bought a Ledger signer from CryptoBilis and have not set it up, do not set it up and contact Ledger Support. If you have set it up, transfer your assets promptly to a new signer with a new recovery phrase. Do not enter or restore any recovery phrase on a signer bought from CryptoBilis. Never enter your recovery phrase into a website, app or form.

If you lost funds or hold a tampered signer, contact Ledger Support at https://t.co/QzukOZdEzq and file a report with local law enforcement. Do not send the signer to anyone before speaking with Ledger Support or local law enforcement. If you lost funds, coordinate with law enforcement before opening the signer. Researchers and others with relevant information can write to [email protected].

If you did not buy from CryptoBilis and want to inspect the inside of your signer, the guide is at https://t.co/Bh9DHQulIv. Use caution and make sure your recovery phrase is backed up first, because opening a signer can damage it.

Ledger will never call you, message you directly, or ask for your 24-word recovery phrase. We will update this post when we verify new information.

[The Hood Labs 🧪 @TheHoodLabs]

@voided @Ledger Save the date!

[The Hood Labs 🧪 @TheHoodLabs]

@siambcofficial Edition 2026 😂

[The Hood Labs 🧪 @TheHoodLabs]

@iancr @Ledger

[The Hood Labs 🧪 @TheHoodLabs]

@CalBlockchain @Ledger Edition 2026 🥳

[The Hood Labs 🧪 @TheHoodLabs]

@P3b7_ Op3n Ledger 2026

[The Hood Labs 🧪 @TheHoodLabs]

@_pgauthier Op3n Ledger 2026

[Ben Yorke (WOO👍) @BenYorke]

Ledger still downplaying, no surprise

My guess is thousands of tampered devices, regional supply chain compromised and every device on the market now should be considered implanted

@MagicalTux shows the confirmed cases here and it’s very widespread: https://t.co/T7CJbAI7Bv

[The Hood Labs 🧪 @TheHoodLabs]

@KLoaec

[The Hood Labs 🧪 @TheHoodLabs]

@a_raving_ape

[The Hood Labs 🧪 @TheHoodLabs]

@btcordinal Reporting the unauthorized burning of my digital assets to INTERPOL 🫡

[The Hood Labs 🧪 @TheHoodLabs]

@CryptoWhaat @Ledger Open your Ledger and you’ll know if you are safe that’s the ONLY WAY TO BE CERTAIN.

[The Hood Labs 🧪 @TheHoodLabs]

@Ledger @_pgauthier Just give a us a clear recap of THE MAJOR INCIDENT we don’t care about anything else 🚨

[The Hood Labs 🧪 @TheHoodLabs]

@_pgauthier Your company is facing a global crisis.. Nobody gives a fuck about your AI conference dude

[The Hood Labs 🧪 @TheHoodLabs]

@FefeDemeny @P3b7_ @Ledger LOL what does he have to say about Germany and Singapore? Nothing? Just silence? Yeah that’s what Ledger does best 😂

[The Hood Labs 🧪 @TheHoodLabs]

@wiimee The Entropy bug is hard to detect..
Just open your Ledger and you’ll see the implant!

But I’ll never buy or recommend any Ledger product again. The way they’re handling this situation is about as bad as it gets, and they’ve clearly shown they’re not fit to be industry leaders!

[The Hood Labs 🧪 @TheHoodLabs]

@anonymluck @Ledger @DonjonLedger Stop defending these clowns 🤡
They’re the only ones who have done absolutely nothing about their reseller network! It’s a disgrace!

[The Hood Labs 🧪 @TheHoodLabs]

@CoinMarketCap Everyone is reducing and auditing their reseller networks except Ledger!

[The Hood Labs 🧪 @TheHoodLabs]

@CryptoWizardd @Ledger It is!

[The Hood Labs 🧪 @TheHoodLabs]

@exsiway_ You can also check here guys:

https://t.co/Z8T80dFcqL

[Yishi @ohyishi]

built this to help you check your hardware wallet for signs of tampering.

upload a board photo. works with onekey, ledger and trezor. free, no signup, no photos saved.

it can flag what looks wrong, but a clean result isn’t an all-clear.

https://t.co/T1WaY2K1dp