Singapore Police Report $2.7M Losses From Tampered Ledger Wallets

The significance here is that the attack surface sits in the physical supply chain, not in code or on-chain contracts, which is a harder risk for self-custody users to audit and for vendors to police. The affected group is hardware-wallet holders who acquire devices through secondary or unverified channels, and the reporting lag between the first cases and Ledger's public alert is notable. Whether tampered-device reports keep surfacing, and how device-authenticity checks evolve, is the open question.