MediaMarkt Saturn has halted sales across Europe after a report of a tampered Ledger device in Germany, while OneKey announced free replacements for customers who bought its devices from CryptoBilis.
According to a report by The Block, MediaMarkt Saturn suspended in-store and online sales of Ledger devices across Europe as of October 13. The decision came after a customer in Germany reported unauthorized hardware in their device. Ledger said that no loss of funds was reported in this case.
The development comes as an investigation continues into Ledger devices purchased through CryptoBilis, a seller in Southeast Asia. The report from Germany added a new dimension to concerns about sales channels.
What has been confirmed in the hidden chip investigation?
Ledger’s Donjon security team said the implant found in devices purchased from CryptoBilis captured the 24-word recovery phrase displayed on the screen during setup and sent it over a mobile network via eSIM. The company said the hardware did not alter the security chip or Ledger operating system and did not interfere with transactions or signatures.
Ledger said it had found no evidence that its infrastructure or services had been compromised, while emphasizing that the total loss and victim figures shared online had not yet been fully verified. Users who lost funds were asked to coordinate with law enforcement before opening the device’s casing.
Which devices are covered by the OneKey replacement?
OneKey revoked CryptoBilis’s authorized reseller status and began reviewing its broader reseller network. The company said it had received no reports of customer fund losses connected to the incident.
The free replacement program covers OneKey devices purchased from CryptoBilis between March 1 and October 13, 2026. All models are included, regardless of whether the device has previously been activated.
Trezor is also taking precautions across its reseller network
Trezor said it had found no evidence that its devices were affected and had received no reports of tampered devices from CryptoBilis, but removed the reseller from its authorized list as a precaution.
As part of a broader reseller network policy, the authorizations of some resellers that received notices will expire on January 1, 2027. These resellers will not receive new stock but may sell their existing products until that date.
Not investment advice.