GoKawiilHardware backdoors found in Ledger wallets sold through authorized retailers after $102M theft
Ledger confirmed that hardware implants planted in some Ledger Nano X wallets sold by Malaysian reseller CryptoBilis allowed attackers to steal roughly $102 million in crypto. Since then, a European buyer and other researchers have reported finding similar implants in Nano X, Flex and Stax devices purchased from a major German electronics chain, suggesting the tampering extends beyond the single reseller Ledger initially named.
GoKawiil's interpretation of the reporting above, not reported fact.
The discovery that implants appeared in devices sold through legitimate, authorized retail channels—rather than only shady online sellers, as hardware hacker Joe Grand found earlier this year—suggests the attack could involve a deeper compromise of Ledger's supply chain. This raises questions about how long Ledger knew about the vulnerability, since Grand reportedly notified the company in March, and could undermine trust in hardware wallets broadly marketed as tamper-proof.
- Ledger says implants tied to the $102M theft were found on Nano X wallets sold by Malaysian reseller CryptoBilis.
- Similar implants have now surfaced in Ledger Flex and Stax devices bought from a major European electronics chain.
- Researcher Joe Grand reportedly flagged similar implants to Ledger in March, raising questions about the company's response time.
Ledger Nano X Hardware Wallet — Given reports of tampered devices from unauthorized resellers, buying directly from Ledger's official store or a verified authorized retailer is the safest way to get a genuine, untampered hardware wallet. A legitimate Ledger Nano X still offers strong crypto security practices like offline key storage, as long as you verify the device's authenticity upon setup.
See Ledger Nano X Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: zetter-zeroday.com — Oct, 2026-10-14
Published there as: “Who Is Planting Backdoors in Ledger Crypto Wallets?”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.