Hardware wallet maker Ledger faces growing scrutiny after an October 13 security update attributed hardware implants solely to Southeast Asian reseller CryptoBilis, despite customer claims that tampered signers were purchased at European electronics retailer MediaMarkt.
Unauthorized Cellular Implants Bypass Genuine Check
According to Ledger Donjon, the internal security team at Ledger, the physical implant reads a user's 24-word recovery phrase off the screen during setup. The modified device then transmits the stolen seed phrase over a cellular connection.
While Ledger confirmed a tampered signer for an affected user on October 10, its official update referenced only inventory sold through CryptoBilis. However, the built-in Genuine Check utility verifies the primary security chip but does not inspect surrounding electronic components, allowing hidden spy hardware to pass undetected.
European Supply Chain Scrutiny and Financial Losses
Multiple users publicly challenged the scope of the update, reporting compromised hardware from MediaMarkt stores in Europe. User @0xJohannes_ shared video evidence of a newly purchased device containing unauthorized internal wiring and cellular modules. Store records traced that inventory batch to European electronics distributor Aqipa, and the device has been sent to Ledger for physical analysis.
Financial losses tied to the tampering include one trader who lost $6.6 million in Bitcoin after purchasing a device through CryptoBilis. Ledger has urged affected users to file police reports and contact customer support, advising CryptoBilis buyers to transfer funds to a new signer with a fresh recovery phrase, though the company has not confirmed reimbursement plans.
Key Takeaways
- Ledger confirmed on October 10 that hardware implants read 24-word seed phrases during setup and broadcast them over cellular networks.
- Customer reports cite compromised devices from European retailer MediaMarkt and distributor Aqipa, contradicting claims limiting the issue to CryptoBilis.
- A single trader reported losing $6.6 million in Bitcoin following a purchase from CryptoBilis.
- The company's Genuine Check software checks the security chip but fails to detect secondary component modifications.
Why It Matters
Reports of tampered devices surfacing at major European retailers move this investigation from an isolated reseller issue to a broader supply chain vulnerability. If compromised inventory extends through legitimate distributors like Aqipa, device makers will face increasing demands for hardware auditing and tamper-evident packaging. As risks expand across the crypto market, security guarantees may require physical retail verification alongside cryptographic proof.
