Damn, the hardware wallet you bought may have been “opened up” before it even left the factory? 🔓
Ledger has just updated its investigation into this device-tampering incident, and the details are worse than you might expect:
🔹 An organized crime group spent several months buying genuine Ledger devices
🔹 They opened them up and installed custom hidden hardware designed to steal recovery phrases during setup
🔹 Then they reassembled the devices and resold them to customers through third-party distributors in Southeast Asia
🔹 They also built an entire operation to collect recovery phrases, steal crypto, and launder money—spending millions of dollars before carrying out a coordinated mass theft
Ledger says its chips, BOLOS operating system, and servers were not compromised. The devices were tampered with after leaving official channels, somewhere in the distribution process.
Authorized distributors in Southeast Asia and Hong Kong have now been ordered to suspend all sales. Stores are not allowed to display devices on open shelves, and returned devices may not be resold.
In other words, the biggest vulnerability in a hardware wallet isn’t the chip—it’s “where you bought it.”
A few tips to protect yourself:
✅ Buy only from the official website or authorized retailers. Don’t be tempted by cheap secondhand or unsealed devices.
✅ Generate your recovery phrase yourself. If you receive a device with a “pre-set recovery phrase,” throw it away.
✅ When unboxing, check the packaging and casing for signs of tampering.
Where did you buy your cold wallet? 👇
#9月CPI来袭原油美债走势如何 #BTC #ETH
Ledger has just updated its investigation into this device-tampering incident, and the details are worse than you might expect:
🔹 An organized crime group spent several months buying genuine Ledger devices
🔹 They opened them up and installed custom hidden hardware designed to steal recovery phrases during setup
🔹 Then they reassembled the devices and resold them to customers through third-party distributors in Southeast Asia
🔹 They also built an entire operation to collect recovery phrases, steal crypto, and launder money—spending millions of dollars before carrying out a coordinated mass theft
Ledger says its chips, BOLOS operating system, and servers were not compromised. The devices were tampered with after leaving official channels, somewhere in the distribution process.
Authorized distributors in Southeast Asia and Hong Kong have now been ordered to suspend all sales. Stores are not allowed to display devices on open shelves, and returned devices may not be resold.
In other words, the biggest vulnerability in a hardware wallet isn’t the chip—it’s “where you bought it.”
A few tips to protect yourself:
✅ Buy only from the official website or authorized retailers. Don’t be tempted by cheap secondhand or unsealed devices.
✅ Generate your recovery phrase yourself. If you receive a device with a “pre-set recovery phrase,” throw it away.
✅ When unboxing, check the packaging and casing for signs of tampering.
Where did you buy your cold wallet? 👇
#9月CPI来袭原油美债走势如何 #BTC #ETH