Implants and Backdoors Found in Ledger Crypto Wallets Sold in Asia and Europe
What happened
Ledger announced that a backdoor embedded in some Ledger wallets sold in Southeast Asia allowed thieves to steal approximately $102 million in cryptocurrency. Separately, hardware implants were found on Ledger Nano X wallets sold in Germany. These implants were initially discovered on units sold by an authorized Ledger reseller in Malaysia, but reports also indicate implants were found in devices purchased at a large European electronics chain store.
From zetter-zeroday.com
Why it matters
The discovery of implants and backdoors suggests a potential compromise within Ledger's supply chain. This raises significant operational and security risks for the hardware wallet industry and could erode consumer trust in digital asset security.
From zetter-zeroday.com
Who's involved
- LedgerManufacturer of the compromised Ledger Nano X, Flex, and Stax wallets.
- Southeast AsiaRegion where wallets were sold and where the initial backdoor was exploited.
- MediaMarktLarge European electronics chain store where compromised devices were reportedly purchased.
- MalaysiaCountry where an authorized reseller based the initial implant discovery.
Who could feel it
Possible knock-on effectsThese are possibilities Brind reasoned out, not predictions, and not advice. Most are not stated in any report.
- LedgerSpeculative
Ledger could face increased costs related to security remediation and potential losses in revenue due to reputational damage.
- MediaMarktSpeculative
The electronics chain store might face increased costs related to supply chain security and potential losses in sales demand.
- EuropeSpeculative
Consumers in Europe might face increased costs or reduced demand for hardware wallets due to security concerns.
Keep exploring
The entities involved
-
Ledger
French company
-
Southeast Asia
south-eastern region of Asia