Chainalysis posted findings this week on an operator who ran a task scam, the kind that pays victims small amounts to post fake reviews or inflate online sales, then tells them their account carries a negative balance that has to be topped up with their own money before any earnings can be withdrawn. He moved the proceeds into three Ledger wallet addresses. The devices came from CryptoBilis, the Southeast Asian reseller at the center of the implant case, and attackers emptied all three, taking 60 BTC, more than $4.9 million at the quoted level. The irony is the headline, but the useful detail is the confirmation of reach. Investigators found unauthorized hardware implants in those devices capable of transmitting recovery information over a mobile network, which is the same mechanism Ledger described on October 13, and this case shows it worked on wallets that were funded and actively used rather than only on test units. It also means the loss estimates circulating for this incident include money that was itself stolen, which is worth keeping in mind when reading the aggregate figures. Ledger's answer, announced October 15, is Atom, an Android-based device with a protective enclosure and tamper sensors, which does not ship until mid-2027.