The reseller-linked losses first reported over the weekend now have a mechanism attached. Attackers allegedly implanted hardware into devices sold through distributor CryptoBilis, with reported losses still above $86 million. Ledger says its own systems and its direct sales were not affected. A physical implant is a different category of problem from a phishing campaign or a leaked seed phrase, because it means the device was compromised before the owner ever touched it, and no amount of careful behavior by the buyer would have prevented it. The practical read for anyone holding a device: where you bought it is now a relevant question, and the answer matters more than how carefully you have handled it since. The loss figure remains unconfirmed and the allegation of implanted hardware has not been independently verified.