TREE NEWS update: Ledger said a highly organized criminal group spent millions of dollars buying genuine Ledger devices, implanting custom hidden components to steal recovery seed phrases during setup, then reselling them through Southeast Asian distributors. Ledger said the incident was a localized distribution-channel attack, not a chip, OS or server vulnerability, and has suspended sales by authorized resellers in Southeast Asia and Hong Kong pending inventory sampling checks.
Ledger Confirms Hardware Implant Attack via Southeast Asia Distribution Channel
The framing matters as much as the fact: Ledger is drawing a line between its own cryptographic stack and the physical supply chain that delivers it, which keeps the trust question focused on logistics rather than firmware. For buyers, the practical consequence is that provenance of a device, not the brand on the box, becomes the variable that matters. Whether the sampling checks restore confidence in the reseller channel, or push users toward direct purchases and self-verification, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.