Ledger has confirmed that an unauthorized hardware implant was discovered in at least one device sold through the reseller CryptoBilis. Here is what happened, why it matters, and how to keep your crypto safe.