Everyone knows what happened with Ledger recently. But what’s the real takeaway? A reseller had devices physically implanted. The implant watched the screen during setup, stole the 24 word seed, and sent it over LTE. Secure Element was never touched. Genuine Check still passed. This isn’t just a Ledger problem. It applies to any physical product you buy another hardware wallet, a second hand phone, a “new” device from a reseller, anything that sits between the factory and your hands. Your security is only as strong as the path that product took to reach you. Basic OPSEC that actually matters: Buy direct from the manufacturer’s website whenever possible. Cuts out most hardware supply chain risk. • For higher funds → multisig only. One compromised device can’t move anything alone. • Against software exploits: reset / reinstall the machine (or key environment) two or three times before treating it as clean. • Never trust a seed (or private data) from a device with any doubt about its origin. • Test with small amounts first. Assume the worst on first setup. Hardware still works. Always be paranoid about security.