Concerns over hardware wallet security have resurfaced after reports of Ledger devices sold with unauthorized implants that captured users' recovery phrases. Security experts note that detecting such sophisticated tampering is difficult, even for technical individuals, and that users must trust intermediaries in the supply chain.
The security of hardware wallets is crucial for safeguarding cryptocurrency assets, and reports of supply chain tampering raise questions about the trustworthiness of the entire distribution process, potentially impacting user confidence and the adoption of self-custody solutions.
Concerns about the security of hardware wallets have been amplified following reports of Ledger devices being sold with unauthorized implants. Security researcher Joe Grand stated that ordinary cryptocurrency owners cannot realistically detect sophisticated tampering with these devices, a sentiment echoed by crypto analyst Mati Greenspan who noted that buying a hardware wallet introduces a new chain of trust from manufacturer to supplier to the end user.
Ledger confirmed on Saturday that one affected device, sold through CryptoBilis—an authorized reseller in Indonesia, Malaysia, and the Philippines—contained an unauthorized implant. This implant captured users' recovery phrases and transmitted them over cellular networks. In response, Ledger asked resellers to halt sales in Southeast Asia and Hong Kong.
Hardware wallets are designed to keep private keys offline, but their distribution networks can be exploited for supply-chain tampering. While Trezor, a competitor to Ledger, stated its devices undergo authenticity checks and accept only signed firmware, a spokesperson acknowledged that these measures cannot rule out physical tampering. Trezor also noted that the type of attack seen on Ledger devices, which captures information from the screen without modifying firmware, has not been observed on its own products. As a preventive step, Trezor announced on Tuesday that it would reduce its number of resellers.
Grand suggested design changes, such as transparent casings or tamper-resistant enclosures, to make supply-chain attacks more difficult, though he cautioned that these measures alone would not eliminate the risk.
Pick the topics you care about. Get only what matters, on your cadence.