Karpelès Says Airport-Bought Ledger Flex Contained Spy Implant

This matters less as a new vulnerability than as a supply-chain story: the claim concerns a hardware wallet bought through an airport retailer, while Ledger's confirmed losses trace back to a different reseller. That gap is the real signal — the risk surface here is distribution and resale channels, not the device architecture itself. The open question is whether Ledger's investigation expands beyond CryptoBilis-linked units, and how much scrutiny third-party and travel-retail sellers now attract.