Ledger confirmed that hardware wallets sold by reseller CryptoBilis contained an LTE-enabled implant designed to capture a user’s 24-word recovery phrase during setup, leaving the Secure Element and operating system unaltered. In response, Ledger requested resellers to halt device sales across Southeast Asia and Hong Kong, while European retailer MediaMarktSaturn withdrew Ledger products across its operating markets. Reports link the vulnerability to a suspected $86 million drain, though Ledger stated that verified fund losses in its investigation remain confined to devices distributed by CryptoBilis, with no evidence of compromise across its internal systems or direct-sales channels.
The incident shifts operational security risk for self-custody from firmware integrity to physical supply chains, presenting a critical vulnerability for both retail users and institutional custody procurement. Trezor announced plans to reduce authorized resellers from 1 January 2027 as a preventive measure, noting no evidence that its own devices were compromised. The full scale of affected inventory, aggregate financial losses, and whether other distribution intermediaries were compromised remain uncertain, particularly as Ledger confirmed that its Genuine Check software cannot detect this form of hardware tampering.
BNY and Citadel Securities executed an overnight repo transaction utilizing a tokenised two-year Treasury note settled within minutes on BNY’s private digital ledger to raise cash. The transaction demonstrates the operational application of tokenised sovereign collateral within core institutional funding markets, where instant transferability and shared ledger records provide collateral efficiencies over legacy settlement cycles. However, its broader systemic significance remains limited by the use of a proprietary private ledger and a single bilateral transaction, with no evidence yet of secondary liquidity or multi-dealer participation.
Strive acquired 3,311 BTC for $280 million between 5 and 9 October at an average price of roughly $84,500, lifting its aggregate reserves to 32,773 BTC as the fifth-largest publicly traded corporate holder. The acquisition coincided with a sharp market liquidation event in which crypto-wide liquidations exceeded $771 million—predominantly in long positions—pushing Bitcoin briefly below $81,000 before spot prices recovered to $83,134, up 1.57% over 24 hours on $31.15 billion in trading volume. While corporate treasury accumulation continues to absorb available supply, it remains uncertain whether current spot stability reflects durable institutional accumulation or transient short-covering following leverage flushes.
