Ledger has confirmed that unauthorized hardware spy chips were implanted in some of its devices distributed by Southeast Asian reseller CryptoBilis. These malicious modifications allowed attackers to drain the cryptocurrency wallets of affected users.