MediaMarktSaturn pulls Ledger wallets after tampering reports in Germany
European retailer removes Ledger wallets over tampering concerns
MediaMarktSaturn has pulled all Ledger hardware wallets from its stores and website worldwide. The company called the move a precautionary step after reports of tampered devices.
Ledger, the French maker of hardware wallets that store cryptocurrency offline, confirmed it worked with MediaMarktSaturn on the suspension. A customer in Germany reported finding a hardware implant inside a Ledger wallet they bought from a MediaMarkt store. Ledger said no fund losses have been reported in that case and that there is no sign its systems were compromised.
What buyers reported
An X user named Johannes said he bought two Ledger wallets from two different MediaMarkt locations and found unauthorized cables and cellular modules inside both. The implants were reported to transmit users' recovery phrases over cellular networks.
Investigation expands beyond Southeast Asia
The security alert first gained attention on Friday when Ledger said it was looking into losses tied to devices sold through CryptoBilis, a reseller based in Southeast Asia. The company later said it was investigating reports outside the CryptoBilis network as well.
Former Mt. Gox CEO Mark Karpelès claimed on Tuesday that a Ledger Flex bought at Singapore airport also contained a spy implant. Ledger did not directly address that claim and instead pointed users to its CryptoBilis investigation update.
Official statements
A MediaMarktSaturn spokesperson told Cointelegraph: "The products have been removed from our product lineup internationally in all of our countries. We did this as a precautionary measure." Ledger said it is coordinating with retailers on the suspension.
Why this matters for wallet users
Hardware wallets are meant to keep cryptocurrency keys safe by storing them offline. If a device contains hidden components that can send recovery phrases over a cellular network, the core promise of self-custody is undermined. Users who bought Ledger wallets from physical stores in Europe or airports in Southeast Asia may want to check their devices.
What remains unclear
It is not yet clear how widespread the tampering is or which other retailers may have sold affected devices. Ledger has not confirmed whether the Germany or Singapore cases involve the same tampering method as the CryptoBilis devices.
- MediaMarktSaturn removed Ledger products from all stores and its website internationally.
- A German customer reported an implant with unauthorized cables and a cellular module.
- No fund losses have been reported in the Germany case, according to Ledger.
- Ledger is investigating reports beyond the Southeast Asian reseller CryptoBilis.
- Mark Karpelès alleged a Singapore airport purchase also contained an implant; Ledger did not directly comment.