First Ledger Stax Found With Unauthorized Hardware Implant

This matters because it shifts the threat model for hardware wallets from software exploits to physical supply-chain tampering, where the device itself becomes the attack surface. It affects anyone relying on self-custody, particularly buyers sourcing devices outside official channels. The implant's cellular modem and hidden antenna suggest a design meant to exfiltrate seeds remotely, not just at the point of sale. The open question is whether this is an isolated case or evidence of a broader tampering pipeline, and how device makers and resellers respond.