Ledger Exploiter Moves 2,990 ETH to Tornado Cash, Analyst Says

The unresolved part is the silence: the fund movement is attributed by an analyst but not confirmed by Ledger, so the on-chain claim and the company's account of the incident are running on separate tracks. The reseller warning shifts scrutiny from a single exploit to the supply chain around hardware wallets, a harder problem to audit because it sits outside the device itself. Whether Ledger addresses either point publicly is the open question.