Hardware wallet supply chain under fire after Ledger implant scandal
Implanted devices siphoned crypto from wallets sold through authorized resellers
Malicious hardware implants found inside Ledger wallets sold by an authorized reseller have renewed concern about supply chain tampering in the crypto industry. The implants captured users' recovery phrases and transmitted them over cellular networks, allowing attackers to steal funds.
On Saturday, Ledger confirmed that at least one affected device contained an unauthorized implant. Crypto losses linked to the tampered wallets sold by CryptoBilis may exceed $86 million.
Key details from the Ledger incident
- Implants in Ledger wallets captured recovery phrases and sent them over cellular networks.
- The tampered devices were sold by CryptoBilis, listed as an authorized reseller in Indonesia, Malaysia, and the Philippines.
- CryptoBilis is also listed as an authorized reseller for OneKey, which recently dropped the company following the probe.
- Security researcher Joe Grand said even technical experts cannot easily detect sophisticated tampering with their eyes.
- Trezor acknowledged it has not observed this type of screen-based attack on its devices.
What security experts are saying
Hardware wallets are designed to keep private keys offline, reducing exposure to online attacks that target software wallets. However, their broad distribution creates opportunities for tampering before devices reach buyers.
Crypto analyst Mati Greenspan said he avoids hardware wallets entirely, noting that each new device adds another link in the chain of trust. "When you buy a hardware wallet, you're introducing a whole new chain of trust, from the manufacturer to the supplier to whoever handled the device before it reached you," he said.
Nick Neuman, CEO of Casa, argued that avoiding third-party trust completely is impossible. Instead, he recommended spreading risk across multiple providers rather than relying on just one.
Trezor's response and design alternatives
Trezor said its devices undergo authenticity checks and accept only signed firmware, but warned these measures cannot guarantee against physical tampering. It noted the Ledger implants pose a distinct challenge because they capture information from the screen without modifying the firmware.
Trezor announced on Tuesday that it would reduce the number of resellers as a preventive step.
Joe Grand suggested several physical design changes, including transparent casings that expose internal components and tamper-resistant enclosures that would force attackers to recreate the entire housing to hide modifications. He cautioned that such measures could make supply-chain attacks harder but would not eliminate the risk entirely.
What is confirmed and what remains unclear
Confirmed: Ledger verified that at least one wallet sold through CryptoBilis contained an unauthorized implant. The implants captured recovery phrases and transmitted them via cellular networks. CryptoBilis operated as an authorized reseller in parts of Southeast Asia.
Still unclear: Whether additional unauthorized resellers beyond CryptoBilis are involved, and the full extent of losses from tampered devices.
Why this matters for self-custody users
The incident highlights a growing tension in crypto: hardware wallets promise greater security by keeping keys offline, but the path from manufacturer to user involves multiple hands that can introduce vulnerabilities. As hardware wallet adoption has grown, so too have the risks posed by intermediaries in the supply chain.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.
Related Posts
Circle to Acquire Tazapay for $400 Million to Expand Cross-Border Payments
