Ledger received reports of suspected hardware tampering months before its October security incident, raising questions about its response to potential customer risks. Former Mt. Gox CEO Mark Karpelès said at least two people reported tampered devices to Ledger beginning in December 2025.
Security researcher Joe Grand said he alerted Ledger on March 4, 2026, after finding an implant in a Nano X purchased through Lazada Thailand. He criticized the company for not issuing a broader customer warning.
Researchers Question Ledger’s Response
Karpelès said the reports and increasingly sophisticated tampering methods should have prompted stronger action, including warnings about potential risks to customers using Ledger devices.
The latest concerns emerged on October 9, when customers reported losses involving devices sold through Southeast Asian reseller CryptoBilis. Ledger later confirmed that one affected device contained an unauthorized hardware implant.
Grand said the Nano X he examined came from a Lazada merchant named “LedgerXXX.” The seller does not appear on Ledger’s list of authorized resellers in Thailand, raising further questions about the device’s source.
Fake Updates Add Further Security Risks
SlowMist warned that scammers were using fake Ledger firmware updates to exploit the incident. The security firm urged users to avoid suspicious links and never enter recovery phrases on websites.
Separately, Chainalysis reported that a scammer lost more than 60 Bitcoin, worth approximately $4.8 million, during the October 9 theft.
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.