Tampered Ledger wallets sold through resellers leaked recovery phrases, and Ledger and Trezor are tightening sales

Summary

Ledger confirmed that wallets sold by a Southeast Asian retailer carried a hidden implant that sent out users' recovery phrases, Decrypt reported on Oct. 13.

Decrypt later reported that Ledger asked resellers in seven Asian markets to pull devices after a suspected $86 million drain, and that European electronics chain MediaMarkt Saturn halted Ledger sales after a customer in Germany reported finding an implant.

Rival Trezor is ending reseller authorizations on Jan. 1, 2027, according to Decrypt.

Bitcoin Magazine reported that Ledger released a statement describing a “sophisticated” supply chain attack by an organized crime group that spent millions targeting hardware wallet users.

Separately, Cointelegraph reported that a scammer lost $4.8 million in stolen funds that had been stored on tampered Ledgers.

Key facts

• Wallets sold by a Southeast Asian retailer carried a hidden implant that sent out recovery phrases. (Decrypt)
• Ledger asked resellers in seven Asian markets to pull devices after a suspected $86 million drain. (Decrypt)
• MediaMarkt Saturn halted Ledger sales after a German customer reported an implant. (Decrypt)
• Trezor ends reseller authorizations on Jan. 1, 2027. (Decrypt)
• A scammer reportedly lost $4.8 million stored on tampered Ledgers. (Cointelegraph)