How did compromised hardware wallets reach Ledger customers?

Ledger says the confirmed cases in a reported wallet draining incident involve devices sold through CryptoBilis, a Southeast Asian reseller. An unauthorized hardware implant was found in one affected device. The investigation raises a question that wallet instructions rarely answer in full: what happens between a secure device leaving the manufacturer and a buyer seeing a recovery phrase on its screen? Ledger’s 72 hour public update said the volume of impacted devices was limited and that all confirmed cases related to the October 9 incident involved devices sold through CryptoBilis.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to crypto.news.