Ledger has requested resellers and distributors in six Southeast Asian countries and Hong Kong to suspend sales of its hardware wallets following reports of tampered devices. The company is investigating the incidents, which may be linked to an estimated $86 million in suspected thefts, though Ledger has not verified this figure. No compromise of Ledger's own infrastructure is suspected.
The security of hardware wallets is paramount for cryptocurrency holders, and reports of tampered devices can erode trust and lead to significant financial losses for users if their private keys are compromised.
Ledger has requested that its resellers and distributors in six Southeast Asian countries and Hong Kong suspend sales of its hardware wallets while it investigates reports of tampered devices. The company announced the measure via a tweet on Tuesday, October 13, 2026, asking for products to be removed from shelves.
The request covers Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong. Ledger stated that the only confirmed incidents remain in Southeast Asia and that it has not verified any drains linked to devices purchased elsewhere. The company previously indicated that all confirmed losses involved devices sold through CryptoBilis, a regional reseller.
Ledger's security team discovered that the implant can read the 24-word recovery phrase from the device's screen during the setup process and transmit it via LTE. This allows anyone with the phrase to restore the wallet and access its funds. While onchain investigator Specter has traced over $86 million in suspected thefts, Ledger has not independently verified this amount.
Separately, MediaMarkt Saturn ceased selling Ledger devices in its stores and online, with Ledger's agreement, after a customer in Germany reported an implant. No loss of funds was reported in this instance. Rival hardware wallet maker Trezor announced on Tuesday that it will end its authorizations for resellers on January 1, 2027, as a precautionary measure, emphasizing that there is no evidence its own devices have been compromised.
Pick the topics you care about. Get only what matters, on your cadence.