If I disassemble the Ledger Nano S, I probably won’t be able to put it back together—done for. 🐕

NATIONAL POLICY PROPOSAL · REVISED OCTOBER 2026 National Supply Chain Integrity Partnership (NSCIP) Protecting American Consumers Through Independent Product Audits, Hardware Security, and Supply Chain Accountability Americans purchase billions of dollars in electronic products through online marketplaces every year, trusting that the devices delivered to their homes are authentic, functional, and secure. Yet a serious gap exists in the nation's consumer protection infrastructure: the United States lacks a comprehensive, coordinated program dedicated to independently purchasing and forensically auditing consumer electronics as they are actually sold and delivered through online marketplaces. A legitimate device can be securely manufactured, pass factory inspections, carry authentic serial numbers, and still reach its purchaser with malicious hardware, compromised firmware, or unauthorized surveillance capabilities. The vulnerability arises because product authenticity does not guarantee product integrity. A device can be genuine but maliciously altered somewhere between the factory and the consumer. Online marketplaces introduce additional complexity. Products may pass through multiple distributors, fulfillment centers, third-party sellers, returns processors, and international shipping networks. Each transfer creates potential opportunities for interference. Existing federal agencies address important portions of this problem, including cybersecurity, counterfeit goods, import enforcement, and consumer protection. However, these responsibilities are fragmented, and no single national program systematically audits the post-manufacturing security integrity of consumer electronics across online distribution channels. The proposed National Supply Chain Integrity Partnership (NSCIP) would close this gap through a federally coordinated public-private initiative combining independent product purchasing, forensic examination, threat intelligence, marketplace accountability, and rapid consumer notification. Its defining capability would be a National Online Product Integrity Audit Program, under which products would be purchased anonymously through ordinary commercial channels and examined for unauthorized hardware, malicious firmware, spyware, and evidence of supply chain tampering. NSCIP would initially operate as a public-private partnership supported by existing federal agencies, independent testing laboratories, manufacturers, major online marketplaces, and cybersecurity researchers. The initiative would begin with high-risk consumer electronics and expand according to demonstrated threats. Its guiding principle is straightforward: America must test the products consumers actually receive, not merely trust the products manufacturers originally shipped. I. The National Security Gap Between Manufacturing and Delivery Modern cybersecurity emphasizes software vulnerabilities, network intrusions, ransomware, identity theft, and data breaches. Traditional consumer protection focuses on defective products, false advertising, counterfeiting, and physical safety. Neither framework fully addresses deliberate malicious interference with genuine electronic products during distribution. Consider a cryptocurrency hardware wallet manufactured according to specification. It leaves the factory with legitimate components and authentic firmware. During distribution, an adversary intercepts the device, installs a concealed implant, and repackages it. The eventual purchaser may receive a product bearing genuine manufacturer markings and apparently valid packaging. Yet the device may have been modified to compromise private keys, manipulate transactions, or expose sensitive information. Comparable threats affect authentication tokens, network routers, security cameras, computers, smartphones, and other connected devices.

The Ownership, Trust Collapse, and Distressed Value of Ledger Ledger SAS, the French maker of the world’s best-known cryptocurrency hardware wallets, is a privately held company. Founded in 2014 it has no single controlling shareholder. Equity is divided among the founding team and employees (who retain a meaningful stake) and a broad set of institutional investors. Major backers from successive funding rounds include 10T Holdings, Digital Currency Group, Samsung Ventures, Morgan Creek Capital Management, Korelya Capital, Molten Ventures, True Global Ventures, and Cathay Innovation. The company last raised primary capital around 2023 at a valuation of roughly $1.3–1.5 billion and later explored a U.S. IPO that some reports pegged near $4 billion before pausing those plans. Pascal Gauthier has served as Chairman and CEO since 2019. In October 2026 that ownership structure and valuation faced a sharp stress test. Users who had purchased Ledger devices through CryptoBilis, an authorized reseller operating in Indonesia, Malaysia, and the Philippines, reported drained wallets. On-chain researchers estimated losses between roughly $86 million and $102 million across several hundred addresses. Ledger confirmed that at least some of the affected devices contained unauthorized physical implants—small hardware components capable of reading the recovery phrase from the device screen during setup and transmitting it over a cellular network. The reseller had changed ownership earlier in the year. Ledger stated that its own manufacturing, secure elements, software, and direct sales channels showed no evidence of compromise, and it instructed CryptoBilis to halt sales. The incident was therefore a reseller-level physical supply-chain attack rather than a breach of Ledger’s core product or systems. Nonetheless, the fact that an “authorized” channel could deliver spyware-laden devices under intact packaging struck at the central promise of hardware wallets: that private keys remain offline and under the user’s exclusive control. A parallel event earlier in 2026 at Coldcard (Coinkite) underscored that the category is not immune. A multi-year firmware bug had caused certain Coldcard devices to generate seeds with far weaker entropy than intended, allowing attackers to brute-force private keys offline. Losses were estimated in the $100–130 million range. Unlike the Ledger case, this was a software defect rather than physical implants, yet both episodes produced the same market reaction: eroded confidence that the security model holds from factory to end user. For a company whose entire brand rests on trust, the combined effect is material. Prior valuations reflected Ledger’s large installed base, leading market position, and recurring software revenue. In a firesale or distressed context—where a buyer underwrites reputational damage, potential liability, customer churn, remediation costs, tighter supply-chain controls, and regulatory scrutiny—those marks become unreliable. A realistic distressed equity range sits substantially lower, on the order of $300–800 million, depending on how cleanly the problem remains contained to one reseller, the company’s cash position, the durability of its revenue, and a buyer’s confidence that controls can be strengthened. Strategic acquirers or specialist private equity might still see residual value in the technology, user base, and brand if remediation is credible; pure financial buyers would demand a deeper discount. The episode illustrates a structural vulnerability that ownership structure alone cannot solve. Founders and venture investors can align incentives and fund growth, but they cannot eliminate the attack surface that appears once devices leave the factory and pass through third-party channels. Both the CryptoBilis implants and the Coldcard entropy failure show the limits of that model once trust is called into question.

BREAKING: TREZOR TO TERMINATE RESELLER AUTHORIZATIONS AMID HARDWARE WALLET SUPPLY-CHAIN ATTACK CONCERNS Trezor is significantly reducing its authorized reseller network following the recent Ledger supply-chain attack. In a letter to partners, Trezor announced: - Existing reseller authorizations will expire January 1, 2027. - Affected resellers can continue selling remaining inventory through the holiday season but will receive no new stock. - Trezor will implement stricter oversight of how devices are sourced, stored, and handled. - The company emphasized there is no evidence that any Trezor devices have been compromised. Trezor says the move is a precautionary measure to reduce supply-chain risks and protect customers’ Bitcoin.

You bought a Ledger somewhere other than KryptoEkipa, took it apart looking for a bug, and now you’re left with three screws and a case that doesn’t fit? LEDGER REASSEMBLY SERVICE — We put back together what you took apart! Sign up via private message 📩😉

🚨 LEDGER UPDATE : With the latest developments, I've updated the list of Ledger resellers and the associated risks. • A Ledger Flex bought from a MetaPod vending machine at Singapore airport has been confirmed infected. MetaPod is an official Ledger reseller, also found in Malaysia and Hong Kong. • Another Ledger Flex bought at Challenger Vivo City Singapore has been found tampered too some minutes ago. 
It was an official reseller that I had flagged as high-risk since the start of the affair. • A device bought from MediaMarkt Saturn has also been confirmed infected. They have just announced they are halting distribution as well. • We are also awaiting results on a device bought from MediaMarkt Trier, Germany, whose supplier was also Aqipa. As a reminder, I have put together a list of resellers that could represent a risk due to their regional proximity to one another. There is therefore a risk that their supply chain has also been compromised, but nothing is confirmed until it is.

People are buying Ledgers like Pokémon cards, all in the name of science 👏 I hope he asked who the retailer of these devices was, because it's not just about MediaMarkt anymore. What a community !

And if everything I said in today’s video wasn’t enough. It feels like there’s a HUGE distrust campaign (and rightly So based on fact) towards self custody. The institutions want to hold your assets for you

Is Ledger finished after a $93 MILLION hack? On October 9th, attackers drained up to $93 million from 300+ wallets in just 47 minutes, according to on-chain researchers. Ledger has confirmed a hidden chip inside a device sold by CryptoBilis, one of its authorized resellers. The chip read the 24-word recovery phrase during setup and sent it out over a mobile network. Ledger says its own chips, software, and direct sales were not affected. To put this in perspective, Ledger has sold 7+ million devices and secures an estimated ~$100 billion in customer assets. Its entire business depends on one promise: that your crypto is safe. Yet this is its third major security incident since 2020, and the company reportedly shelved its $4 BILLION IPO in May. Meanwhile, spot Bitcoin ETFs let investors hold Bitcoin with no device, no seed phrase, and no reseller to trust. Where do you keep your crypto today?

ok this is going too far, even europeans are getting hit by the ledger supply chain attack. here's how to be 100% sure you're not impacted: 1/ the genuine check is useless for this. it only verifies the secure element. the implant is next to it and listens to the screen data without touching the se or firmware. a compromised device still passes it clean. 2/ only real check is opening the device and comparing the inside to ledger's official hardware integrity photos. look for any extra board, wires, lte module, antenna, or modified battery near the screen. if you see anything extra, it's compromised. 3/ if you already set up a device bought from any reseller (mediamarkt, cryptobilis, etc.), move your funds now to a brand new device purchased directly from @Ledger with a completely new seed. never reuse the old one. 4/ devices bought straight from ledger are the lowest risk. even then, physical inspection is the only way to be certain. software checks won't catch this. if in doubt, treat it as compromised and migrate.