It turns out the first signs that Ledger hardware wallets may have been tampered with could date back as early as last year ๐
There are three key developments:
๐น The former CEO of Mt. Gox says that at least two people reported devices containing implanted malicious components to Ledger as early as December 2025, but he has not seen any public warning from the company since
๐น A well-known hardware security researcher says he reported a compromised Nano X on March 4, 2026. He had bought it from the Thai e-commerce platform Lazada, and Ledger responded that it was investigating internally
๐น Blockchain analytics firm Chainalysis says one of the victims had an address with a questionable history of its own. More than 60 BTC (about $4.8 million) was transferred out of three addresses
Even more concerning: according to the former CEO, the latest implant to be removed was clip-on, appeared to be โdesigned for mass production,โ and had been found in Ledger Flex devices at an airport retailer in Singapore and Nano X devices at MediaMarkt stores in Germany. Ledger, however, says spot checks of inventory in Germany found no signs of tampering. Confirmed losses have mainly been concentrated among a small number of retailers in Southeast Asia (the incident disclosed on October 9 involved the authorized retailer CryptoBilis).
There are a few simple things ordinary users can do:
โ Buy hardware wallets only through official channels
โ Verify that your device is genuine using the official verification process before depositing any crypto
โ Never use a recovery phrase that came prewritten in the box
โ If you bought from a third-party seller, move your assets to a new device with a new recovery phrase as soon as possible
Did you buy your hardware wallet from the official website, or through an e-commerce platform or reseller? ๐
#ๆฏ็นๅธ็ญๆๆๆ่ ๆไปๅ่ณ408ไธๆ #BTC #ETH
There are three key developments:
๐น The former CEO of Mt. Gox says that at least two people reported devices containing implanted malicious components to Ledger as early as December 2025, but he has not seen any public warning from the company since
๐น A well-known hardware security researcher says he reported a compromised Nano X on March 4, 2026. He had bought it from the Thai e-commerce platform Lazada, and Ledger responded that it was investigating internally
๐น Blockchain analytics firm Chainalysis says one of the victims had an address with a questionable history of its own. More than 60 BTC (about $4.8 million) was transferred out of three addresses
Even more concerning: according to the former CEO, the latest implant to be removed was clip-on, appeared to be โdesigned for mass production,โ and had been found in Ledger Flex devices at an airport retailer in Singapore and Nano X devices at MediaMarkt stores in Germany. Ledger, however, says spot checks of inventory in Germany found no signs of tampering. Confirmed losses have mainly been concentrated among a small number of retailers in Southeast Asia (the incident disclosed on October 9 involved the authorized retailer CryptoBilis).
There are a few simple things ordinary users can do:
โ Buy hardware wallets only through official channels
โ Verify that your device is genuine using the official verification process before depositing any crypto
โ Never use a recovery phrase that came prewritten in the box
โ If you bought from a third-party seller, move your assets to a new device with a new recovery phrase as soon as possible
Did you buy your hardware wallet from the official website, or through an e-commerce platform or reseller? ๐
#ๆฏ็นๅธ็ญๆๆๆ่ ๆไปๅ่ณ408ไธๆ #BTC #ETH