Ledger's investigation into tampered devices became public on October 9, 2026, after reports surfaced of stolen cryptocurrency linked to hardware wallets purchased through reseller CryptoBilis

Overview Debates Related claims Topics Sources

Deutsche Bank plans to expand its cryptocurrency custody services into Asian financial hubs, specifically targeting Singapore and Hong Kong in 2027

Deutsche Bank's new Bitcoin and Ethereum custody service will directly manage crypto wallets and private keys on behalf of asset managers, hedge funds, and corporate entities

Deutsche Bank plans to launch cryptocurrency custody services in Germany within weeks, initially offering Bitcoin and Ethereum custody to institutional clients

Major global financial institutions including BNY Mellon, State Street, Standard Chartered, U.S. Bank, and Citigroup have committed to offering direct crypto custody services

A tampered Ledger device intercepted the 24-word recovery seed phrase displayed on screen and transmitted the data using a radio frequency transmitter

Babylon's Trustless Bitcoin Vaults protocol locks Bitcoin in self-custodial Taproot-based UTXOs directly on the Bitcoin network without transferring custody to third-party custodians.

Pirate Chain developers acknowledged that the cryptographically hidden nature of Sapling pool transactions complicates efforts to trace where the 39.8 million unauthorized ARRR tokens went

A source code flaw in the Pirate Chain privacy network allowed an unauthorized user to mint approximately 39.8 million ARRR tokens on October 14, 2026

The unauthorized minting of 39.8 million ARRR tokens represented roughly 20% of the total Pirate Chain token supply at the time of the October 14, 2026 exploit

Following the unauthorized minting of 39.8 million ARRR tokens on October 14, 2026, the illicit tokens were rapidly moved into Pirate Chain's Sapling shielded pool

The Pirate Chain network remained operational while developers worked on recovery, instructed wallet users not to move funds, and requested exchanges and mining pools voluntarily pause operations following the October 14, 2026 exploit that minted 39.8 million ARRR tokens

A Bitcoin user can store wealth by memorizing a 12-word seed phrase

Hardware wallet manufacturer Trezor terminated all authorized reseller partnerships, requiring customers to purchase devices directly from Trezor

Former Mt. Gox operator Mark Karpeles warned of secondary markets selling modified hardware wallets that lack secure enclaves or contain tracking hardware

Hardware implants in cryptocurrency wallets bypass the secure enclave by extracting private entropy directly from the display screen

Onchain researchers linked tampered Ledger hardware wallets distributed by Malaysian reseller CryptoBilis in Southeast Asia to suspected cryptocurrency losses ranging between $86 million and $93.2 million across over 300 wallets

Unauthorized implants inside compromised CryptoBilis devices captured users' 24-word recovery phrases from screens during setup and transmitted them over mobile networks using hidden chips

Tether froze $10 million of its dollar-pegged USDT stablecoin tied to the unauthorized hardware implant theft involving compromised Ledger devices sold through CryptoBilis

Ledger bears responsibility for losses caused by tampered devices sold through its authorized resellers

Former Mt. Gox CEO Mark Karpelès reported finding a spy implant inside a unused Ledger Flex device purchased at a Metapod location in Singapore's Changi Airport.