Key facts
- Mark Karpelès claims Ledger received multiple reports of tampered devices dating back to December 2025.
- Security researcher Joe Grand alerted Ledger on March 4, 2026, about a malicious implant in a Nano X.
- Ledger confirmed an unauthorized implant was found in one affected device sold through a reseller.
- Grand also alerted Trezor in August 2026 about tampered wallets purchased from unauthorized sellers on TikTok and Facebook.
Former Mt. Gox CEO Mark Karpelès stated that Ledger received multiple reports of malicious hardware implants in its devices months before its recent security crisis. Karpelès told Cointelegraph that at least two individuals reported tampered devices dating back to December 2025, and he is unaware of any public warnings issued by Ledger in response.
Security researcher Joe Grand informed Ledger on March 4, 2026, about a malicious implant found in a Nano X device purchased in August 2025 from an online marketplace. While Ledger acknowledged the findings and initiated an internal investigation, Grand criticized the company for not proactively alerting its customers.
Ledger's current security issues surfaced on October 9, with reports of crypto losses linked to wallets sold via CryptoBilis, a Southeast Asian reseller. The company has confirmed that one of the affected devices contained an unauthorized implant. Ledger declined to comment on Grand's disclosure, referring inquiries to its public statements on X.