SlowMist founder Cos revealed that a Ledger Flex device has been identified in ongoing investigations linked to the CryptoBilis dealer tampering incident. While the Ledger Nano X was previously the primary device associated with these cases, this development suggests the compromise may extend beyond a single model. Cos warned that Ledger's mainstream hardware wallet series could potentially be affected by tampering at the Southeast Asian dealer CryptoBilis. Ledger has confirmed that all verified incidents to date involve devices sold through this specific distributor, though the scope of affected models appears to be widening based on new forensic findings.