On October 9, 2026, a serious security incident involving Ledger cold wallets distributed by CryptoBilis, a reseller operating in Southeast Asia, came to light. The case raised concerns across the Web3 ecosystem because, according to published investigations, certain devices had been physically tampered with to steal their owners’ recovery phrases. The incident shows that keeping cryptocurrency in a wallet disconnected from the internet does not guarantee absolute protection if the device itself has been compromised.