TREE NEWS update: A highly organized crime ring bought genuine Ledger devices over several months, opened them and implanted custom hidden components that steal seed phrases during device initialization, then routed the units back into sales channels via Southeast Asian distributors, Ledger said on October 16. The group spent millions of dollars and built its own seed-collection servers and theft and money-laundering infrastructure. Ledger said its chips, operating system and servers were not compromised, and has told authorized distributors in Southeast Asia and Hong Kong to pause sales.
Ledger: Crime Ring Spent Millions Implanting Spy Chips in Hardware Wallets
This is a supply-chain attack, not a firmware breach, which makes it harder to defend against: the trust boundary moves from code to the physical distribution layer, and Ledger's own security claims do nothing to address tampered hardware. The immediate burden falls on buyers who acquired devices through secondary or regional channels, where provenance is hardest to verify. The open question is whether pausing authorized distributors in Southeast Asia and Hong Kong actually closes the route, given the ring already demonstrated it can insert units into legitimate sales channels.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.