A tampered Ledger device intercepted the 24-word recovery seed phrase displayed on screen and transmitted the data using a radio frequency transmitter

Overview Debates Related claims Topics

The Ledger hardware wallet spy implant uses a three-chip architecture comprising one chip to read the screen, a cellular modem, and an eSIM to transmit extracted data

Mark Karpelès confirmed finding a spy implant inside a Ledger Flex purchased from Singapore airport reseller Metapod and a Nano X bought from German retailer MediaMarkt

Karpelès Lab CEO Mark Karpelès reported that spy implants were found in Ledger hardware wallets from two additional authorized resellers, Metapod and MediaMarkt, beyond Southeast Asian reseller CryptoBilis

The Ledger hardware wallet spy implant design evolved from a wired-in circuit board to clip-in blank boards designed to fall directly into place inside Ledger Nano X devices

Ledger stated that inspection of store and distributor stock in Germany revealed no signs of device tampering

Mark Karpelès recommended Ledger adopt tamper-evident packaging rather than shutting down its authorized reseller program entirely, calling it too drastic a response to the supply chain breach involving CryptoBilis-sourced devices

Mark Karpelès warned that previously costly and narrowly targeted hardware implants are likely to appear more frequently across hardware wallets in the future

MediaMarkt Saturn halted all Ledger hardware sales on October 13, 2026, in coordination with Ledger

Deutsche Bank plans to expand its cryptocurrency custody services into Asian financial hubs, specifically targeting Singapore and Hong Kong in 2027

Deutsche Bank's new Bitcoin and Ethereum custody service will directly manage crypto wallets and private keys on behalf of asset managers, hedge funds, and corporate entities

Deutsche Bank plans to launch cryptocurrency custody services in Germany within weeks, initially offering Bitcoin and Ethereum custody to institutional clients

Major global financial institutions including BNY Mellon, State Street, Standard Chartered, U.S. Bank, and Citigroup have committed to offering direct crypto custody services

On October 9, 2026, Ledger began investigating hardware wallet thefts linked to devices sold by Southeast Asian reseller CryptoBilis

Ledger's October 13, 2026 update confirmed over $102 million was stolen across 324 cryptocurrency wallets compromised by tampered devices

Ledger confirmed a hardware implant was discovered inside at least one Ledger device sold by reseller CryptoBilis

Babylon's Trustless Bitcoin Vaults protocol locks Bitcoin in self-custodial Taproot-based UTXOs directly on the Bitcoin network without transferring custody to third-party custodians.

The XRP ecosystem awarded a $250,000 bug bounty payout for the responsible disclosure of the XRP infinite mint vulnerability

An OpenAI employee planted a homemade audio recording device behind a television in an executive boardroom at OpenAI's office

Mass-market consumer smartphones like Apple iPhones provide supply chain security benefits for cryptocurrency storage due to high production volumes compared to dedicated hardware wallets

Between $70 million and $100 million was stolen via tampered Ledger hardware wallets distributed through reseller channels over a four-to-five-month period