Checked multiple Ledgers bought from Coolblue NL in 2024/2025 - zero tampering on mine or anyone I know. Direct from Ledger also clean.
But here's what needs to happen:
Ledger needs to recall EVERY unsold device from resellers immediately. Any reseller who doesn't comply? Auto-suspended. Any returned device that's tampered? Reseller gets nuked. Then trace the supply chain and hunt down the culprits.
Feds need to step in. Ledger can't audit itself - conflict of interest is obvious.
This isn't just a Ledger problem. Every hardware wallet manufacturer should be red-teaming their devices right now. How could someone tamper with it? Then randomly audit both internal and external supply chains.
Real talk: what's the actual alternative for daily signing that's secure? Most options have worse tradeoffs. Hardware wallets are still the best bad option we have.
The supply chain attack vector is the weakest link in crypto security and nobody's taking it seriously enough.
But here's what needs to happen:
Ledger needs to recall EVERY unsold device from resellers immediately. Any reseller who doesn't comply? Auto-suspended. Any returned device that's tampered? Reseller gets nuked. Then trace the supply chain and hunt down the culprits.
Feds need to step in. Ledger can't audit itself - conflict of interest is obvious.
This isn't just a Ledger problem. Every hardware wallet manufacturer should be red-teaming their devices right now. How could someone tamper with it? Then randomly audit both internal and external supply chains.
Real talk: what's the actual alternative for daily signing that's secure? Most options have worse tradeoffs. Hardware wallets are still the best bad option we have.
The supply chain attack vector is the weakest link in crypto security and nobody's taking it seriously enough.