A contributing factor to the Liquid Network exploit was the absence of a size limit or manual verification for large, automated peg-out transactions

Overview Debates Related claims Topics

The Ledger hardware wallet spy implant uses a three-chip architecture comprising one chip to read the screen, a cellular modem, and an eSIM to transmit extracted data

Mark Karpelès confirmed finding a spy implant inside a Ledger Flex purchased from Singapore airport reseller Metapod and a Nano X bought from German retailer MediaMarkt

Karpelès Lab CEO Mark Karpelès reported that spy implants were found in Ledger hardware wallets from two additional authorized resellers, Metapod and MediaMarkt, beyond Southeast Asian reseller CryptoBilis

The Ledger hardware wallet spy implant design evolved from a wired-in circuit board to clip-in blank boards designed to fall directly into place inside Ledger Nano X devices

Ledger stated that inspection of store and distributor stock in Germany revealed no signs of device tampering

Mark Karpelès recommended Ledger adopt tamper-evident packaging rather than shutting down its authorized reseller program entirely, calling it too drastic a response to the supply chain breach involving CryptoBilis-sourced devices

Mark Karpelès warned that previously costly and narrowly targeted hardware implants are likely to appear more frequently across hardware wallets in the future

MediaMarkt Saturn halted all Ledger hardware sales on October 13, 2026, in coordination with Ledger

Coinbase published technical priorities on October 13, 2026, outlining options for Bitcoin's post-quantum migration, including staged wallet upgrades and freezing vulnerable dormant coins

A June 2026 study estimated that approximately 2.3 million Bitcoin held in lost, dormant, or early addresses cannot be moved to quantum-resistant addresses

Google Quantum AI white papers estimated in March 2026 that breaking Bitcoin's elliptic curve cryptography would require 1,200 to 1,450 logical qubits or under 500,000 physical qubits

Approximately 6.04 million to 6.26 million Bitcoin, representing over 30% of all mined Bitcoin, sit in quantum-vulnerable public key addresses

Ledger confirmed a hardware implant was discovered inside at least one Ledger device sold by reseller CryptoBilis

An estimated 6 million Bitcoin, representing over 30% of the total Bitcoin supply, is quantum-exposed at rest due to reliance on elliptic-curve signatures.

Six security firms participated in audit work covering Babylon's Aave V4 integration components, including Coinspect, Sherlock, Zellic, ABDK, ZK Security, and Runtime Verification

The theft of private keys from a Bitcoin wallet cannot be reversed due to the irreversibility of Bitcoin transactions

Ledger Donjon reported that hardware implants found in CryptoBilis-sold Ledger devices use a microcontroller to decode screen data during setup, capturing 24-word recovery phrases and transmitting them over LTE using a provisioned eSIM

MediaMarktSaturn suspended sales of all Ledger hardware wallets across online platforms and over 1,000 physical stores in 11 countries on October 13, 2026, following customer reports of hardware tampering.

Trezor stated that its setup checks catch modified firmware, whereas the hardware implant found in rival Ledger devices sold through CryptoBilis reads screen display data directly without altering firmware or internal operating systems

Blockchain security analysts estimated total crypto theft losses linked to tampered Ledger wallets sold through reseller CryptoBilis between $72 million and $93 million