Ledger halts Asian wallet sales after hardware implants steal secrets
This is a DailyCyber.News update, brought to you by BareMetalCyber.com, for Thursday, October 15th, 2026.
Cryptocurrency losses have prompted Ledger to halt reseller and distributor sales across Southeast Asia and Hong Kong while it investigates tampered hardware wallets. Investigators found modified devices that captured the 24-word recovery phrases used to restore wallets and transmitted them through an LTE connection.
The implant was a separate hardware component. It did not modify the wallet’s secure element, operating system, transactions, or signatures. That meant the device could appear to operate normally while the added component intercepted the secret, and Ledger’s integrity self-checks could not detect it.
Anyone using a tampered wallet could lose control of the assets protected by that recovery phrase. Leaders should not assume that authorized reseller status removes supply-chain risk. Defenders also need to recognize that checks focused on software and secure elements may miss hardware added elsewhere in a device.
The broader lesson is that physical tampering can bypass trusted digital controls without changing expected product behavior. Sensitive hardware should come through verified channels, and reseller inventory should be quarantined until its physical chain of custody can be established.
For the sources and the full Daily Cyber newsletter, visit DailyCyber.News.
