Ledger faces supply-chain security scrutiny as implant warnings predate latest crypto wallet crisis

Traders Union
All News
Crypto
Ledger supply-chain security warning

Highlights

Mark Karpelès and Joe Grand reported Ledger received multiple warnings about malicious implants in wallets as early as December 2025, with insufficient public response.
Ledger confirmed at least one unauthorized implant found in a wallet sold via CryptoBilis, but did not comment on prior disclosures or broader customer alerts beyond official statements.
Marketplace ambiguity on platforms like Lazada and rising reports of tampered wallets from both Ledger and Trezor highlight industrywide supply-chain risks and calls for stricter manufacturer-led customer protections.

Earlier warnings and company response

As reported by Cointelegraph, Mark Karpelès says Ledger received multiple warnings about malicious hardware implants before the company’s security crisis surfaced on Oct. 9. Karpelès, the former chief executive of Mt. Gox, told Cointelegraph he knew of at least two people who contacted Ledger about tampered devices dating back to December 2025, and said he has not seen any public warning the company issued in response.

Security researcher Joe Grand told Cointelegraph he alerted Ledger on March 4, 2026, about a malicious implant in a Nano X bought through Lazada Thailand in August 2025. Grand says Ledger acknowledged the findings and said it was investigating internally, but he criticizes the company for not warning customers more proactively about the risk.

Ledger’s current crisis comes to light after crypto losses are reported involving wallets sold through CryptoBilis, an authorized reseller in Southeast Asia. The company has confirmed that one affected device contains an unauthorized implant. Ledger declines to comment on its handling of Grand’s disclosure and refers Cointelegraph to its public statements on X.

Karpelès says a single implant case tied to a questionable seller might not by itself justify a broader response. However, he says the number of reports and the sophistication of the techniques should have been enough for Ledger to act and remind customers to be cautious.

Marketplace gaps and wider industry implications

Grand says the seller of the tampered Ledger device on Lazada was listed as “LedgerXXX” in a presentation shared with Cointelegraph. At the time of writing, that seller is not listed as an authorized reseller in Thailand, although Ledger’s Lazada storefront is, highlighting how marketplace listings can blur the distinction between official and independent vendors.

OneKey’s head of sales, Archie, tells Cointelegraph that platforms such as Lazada host many independent sellers, making it difficult for buyers to identify authorized stores. Following the recent incidents, OneKey removes its reseller listings pending stricter checks, saying manufacturers should bear more responsibility for customer protection instead of relying mainly on buyers to verify sellers.

The issue is not limited to Ledger. Grand says he also alerted Trezor in August 2026 about tampered Trezor One and Model T wallets bought from unauthorized sellers on TikTok and Facebook. Trezor says counterfeit wallets occasionally appear through unauthorized channels and notes it had already warned in 2022 about modified devices sold on Russian marketplaces.

Trezor adds that its recent statement saying it had no evidence of compromised devices applies only to new wallets sold through authorized resellers. The company says it still treats reports from unauthorized channels as early warnings and would move fastest, including direct customer warnings, if a new technique emerges or a case appears through an authorized seller.

In our earlier article on the surge in cybersecurity and privacy startup funding in Q3 2026, we highlighted how total investment climbed to $6.8 billion mainly because late-stage rounds got larger even as the number of deals declined. We also noted that AI-driven and identity-security companies attracted the bulk of capital, alongside a pickup in sector consolidation through major acquisitions—underscoring how seriously markets are taking evolving security threats.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.