Mark Karpelès confirmed finding a spy implant inside a Ledger Flex purchased from Singapore airport reseller Metapod and a Nano X bought from German retailer MediaMarkt

Overview Debates Related claims Topics Sources

The Ledger hardware wallet spy implant uses a three-chip architecture comprising one chip to read the screen, a cellular modem, and an eSIM to transmit extracted data

Karpelès Lab CEO Mark Karpelès reported that spy implants were found in Ledger hardware wallets from two additional authorized resellers, Metapod and MediaMarkt, beyond Southeast Asian reseller CryptoBilis

The Ledger hardware wallet spy implant design evolved from a wired-in circuit board to clip-in blank boards designed to fall directly into place inside Ledger Nano X devices

Ledger stated that inspection of store and distributor stock in Germany revealed no signs of device tampering

Mark Karpelès recommended Ledger adopt tamper-evident packaging rather than shutting down its authorized reseller program entirely, calling it too drastic a response to the supply chain breach involving CryptoBilis-sourced devices

Mark Karpelès warned that previously costly and narrowly targeted hardware implants are likely to appear more frequently across hardware wallets in the future

MediaMarkt Saturn halted all Ledger hardware sales on October 13, 2026, in coordination with Ledger

Deutsche Bank plans to expand its cryptocurrency custody services into Asian financial hubs, specifically targeting Singapore and Hong Kong in 2027

Deutsche Bank's new Bitcoin and Ethereum custody service will directly manage crypto wallets and private keys on behalf of asset managers, hedge funds, and corporate entities

Deutsche Bank plans to launch cryptocurrency custody services in Germany within weeks, initially offering Bitcoin and Ethereum custody to institutional clients

Major global financial institutions including BNY Mellon, State Street, Standard Chartered, U.S. Bank, and Citigroup have committed to offering direct crypto custody services

Coinbase published technical priorities on October 13, 2026, outlining options for Bitcoin's post-quantum migration, including staged wallet upgrades and freezing vulnerable dormant coins

A June 2026 study estimated that approximately 2.3 million Bitcoin held in lost, dormant, or early addresses cannot be moved to quantum-resistant addresses

Google Quantum AI white papers estimated in March 2026 that breaking Bitcoin's elliptic curve cryptography would require 1,200 to 1,450 logical qubits or under 500,000 physical qubits

Approximately 6.04 million to 6.26 million Bitcoin, representing over 30% of all mined Bitcoin, sit in quantum-vulnerable public key addresses

Ledger confirmed a hardware implant was discovered inside at least one Ledger device sold by reseller CryptoBilis

A tampered Ledger device intercepted the 24-word recovery seed phrase displayed on screen and transmitted the data using a radio frequency transmitter

An estimated 6 million Bitcoin, representing over 30% of the total Bitcoin supply, is quantum-exposed at rest due to reliance on elliptic-curve signatures.

Six security firms participated in audit work covering Babylon's Aave V4 integration components, including Coinspect, Sherlock, Zellic, ABDK, ZK Security, and Runtime Verification

Babylon's Trustless Bitcoin Vaults protocol locks Bitcoin in self-custodial Taproot-based UTXOs directly on the Bitcoin network without transferring custody to third-party custodians.