DOJ says a coordinated enforcement week removed more than 3.7 million online accounts, pages and groups and identified over $11 million in potentially freezable funds.

Prosecutors allege a scheme affecting more than 70 US employers generated about $3 million. The Ohio indictment describes cryptocurrency transfers.

The retailer says the withdrawal covers all its countries. Ledger says no fund losses were reported in the German case and directs existing buyers to support.

CryptoBilis is already off Trezor’s seller list. The company says the wider reduction is preventive and that it has no evidence its devices were compromised.

Buyer Ben Yorke identified Metapod as the retailer. Ledger says verified fund losses in its investigation remain tied to CryptoBilis-sold wallets.

Ledger says the added hardware leaves the secure chip and operating system untouched. Its Genuine Check cannot rule out this kind of tampering.

Ledger Support still says confirmed cases involve CryptoBilis. The buyer named distributor Aqipa and said the second device is being sent to Ledger for analysis.

All OneKey models bought from the reseller between March 1 and Oct. 12 qualify, including used devices. Buyers must apply by Dec. 31.

Ledger's security documentation says Genuine Check cannot detect spying implants that leave the secure chip intact, a limit affecting buyers beyond any one reseller.

The reseller’s former founders say they handed over operations in March and that their acquisition agreement delayed a public announcement until mid-October.