New development: reports of tampered wallets predated the Ledger incident
Mark Karpelès says at least two people had reported tampered devices to Ledger as early as December 2025. Security researcher Joe Grand says he alerted the company on March 4, 2026, after finding an implant in a Nano X bought on Lazada in Thailand in August 2025; Ledger reportedly told him it was investigating internally. Karpelès says he saw no public warning following those reports. Ledger declined to comment to Cointelegraph on its handling of the earlier reports and referred to its public statements about the October 9 CryptoBilis incident, in which one affected device contained an unauthorized implant. The issue raised by these accounts is the gap between a technical warning and useful information reaching customers.
Mark Karpelès says at least two people had reported tampered devices to Ledger as early as December 2025. Security researcher Joe Grand says he alerted the company on March 4, 2026, after finding an implant in a Nano X bought on Lazada in Thailand in August 2025; Ledger reportedly told him it was investigating internally. Karpelès says he saw no public warning following those reports. Ledger declined to comment to Cointelegraph on its handling of the earlier reports and referred to its public statements about the October 9 CryptoBilis incident, in which one affected device contained an unauthorized implant. The issue raised by these accounts is the gap between a technical warning and useful information reaching customers.