A Chinese company secretly acquired CryptoBilis, an authorized Ledger reseller in Southeast Asia, and implanted spy chips in hardware wallets before shipping them, allowing attackers to steal private keys and drain cryptocurrency wallets across multiple blockchains. Hundreds of users were affected, with one victim losing $5.3 million despite following security best practices.