💥 Big news: Ledger received reports of “tampered devices” as far back as December last year. Why didn’t they say anything?

There’s a new development in the Ledger/CryptoBilis saga—and this time, it’s about old reports. Cointelegraph just broke the story:

Former Mt. Gox CEO Mark Karpelès told Cointelegraph that at least two people reported “tampered devices” to Ledger in December 2025. (Vietnamese crypto educator Tai Zen was one of them.)

Even more concerning: security researcher Joe Grand submitted a report to Ledger on March 4, 2026, about an implant in a Nano X he’d bought from Lazada Thailand in August 2025. Ledger confirmed they’d received it and said it was “under internal investigation.” And then… nothing. They never issued a warning to users.

Both men are now asking the same question: Months have passed—where’s the warning?

Karpelès did give them some credit: “It’s understandable to get a single report about a device from some shady seller, but as the reports pile up and the technology gets more sophisticated, surely users should be warned to be cautious.”

For comparison, Joe Grand also reported tampered devices sold through unauthorized TikTok/Facebook channels to Trezor this August. Trezor’s response: “As soon as the first case appears through an authorized channel, we act as quickly as possible, including directly warning customers.” Now that’s a different level of response.

For context: According to the latest figures from Bitquery (10-15), the CryptoBilis supply-chain attack has caused cumulative losses of around $102 million, affected 324 wallets across six blockchains, and Tether has frozen $10M.

In other words: This wasn’t the first time Ledger received an implant report—it was just the first time they acknowledged the scale of the problem. The real question is: Where were the warnings signals between last December and this March? What happened during those 10 months?

How would you rate Ledger’s crisis communications this time?

#硬件钱包 #Ledger
For reference only; not investment advice