Modified Ledger Nano X wallets found with hidden eSIM to steal seed phrases
Security researchers at Tibane Labs found counterfeit or tampered Ledger Nano X hardware wallets fitted with an extra chip that reads the device's screen output via electromagnetic leakage, plus a hidden LTE modem, eSIM and antenna powered by the wallet's own battery. This setup lets attackers capture a user's seed phrase as it's displayed and transmit it over mobile networks, despite the wallet's Secure Element chip remaining untouched. Ledger has acknowledged at least one customer suffered losses from a manipulated device, with total losses across victims estimated near $100 million.