Former Mt. Gox CEO discloses a suspected spyware-implanted Ledger wallet that can LTE send seed phrases
BIBIBI
AT A GLANCE
Mark Karpelès said he received a hardware wallet suspected of containing an implanted LTE spyware module that could Ledger send data related to the seed phrase.
Article
Former Mt. Gox CEO reported discovering a hardware wallet implanted with a spyware module Ledger which can LTE send seed phrase information
BlockBeats reported that October 10, former Mt. Gox CEO Mark Karpelès disclosed that he had received a Ledger hardware wallet that appeared to have been implanted with a spyware module. The device came from Malaysia; the outer shrink-wrap was intact, and even after opening it, the anomaly was difficult to spot immediately. The implant was hidden where the screen's original cushioning pad should have been.
Karpelès further explained that the module contained LTE communication components, an antenna,eSIM and a microcontroller connected to the Ledger SPI bus, which could analyze the characters displayed by the device to the user and send the relevant data after the seed phrase setup was completed. The attacker could then monitor the victim's wallet address and choose a suitable time to transfer the assets. He urged users to inspect their devices according to Ledger official guidance.
Original link https://m.theblockbeats.info/flash/371077
Key points
01
BlockBeats reported that former Mt. Gox CEO Mark Karpelès disclosed that a Ledger hardware wallet he received appeared to have been implanted with a spyware module.
02
The article stated that the device came from Malaysia, the outer shrink-wrap was intact, and the implant was hidden where the screen's original cushioning pad should have been.
03
Karpelès said that the module contained LTE communication components, an antenna,eSIM and a microcontroller connected to the Ledger SPI bus.
04
Karpelès said that the module could analyze the characters displayed by the device to the user and send the relevant data after the seed phrase setup was completed.
05
The article stated that the attacker could then monitor the victim's wallet address and choose a suitable time to transfer the assets.
06
Karpelès urged users to inspect their devices according to Ledger official guidance.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Hardware wallets are generally used to isolate and protect the seed phrase required to control crypto assets. This disclosure stated that a Ledger device may contain additional communications hardware that could read the content displayed on the screen and send data related to the seed phrase via LTE. If the seed phrase is exposed, the attacker could use it to transfer the wallet's assets.
Why it matters to readers
The claim concerns the physical tampering of a hardware wallet and the risk of seed phrase leakage. Even if the packaging appears intact, the device described in the article was difficult to inspect and identify as anomalous immediately; therefore, the device's source and inspection procedures may directly affect asset security.
a Ledger hardware wallet, you should pay attention to the device's source and inspect the device according to Ledger official guidance; do not disclose your seed phrase to anyone. The original text did not confirm that other devices or users were affected.
Risks and unknowns
The current content is BlockBeats' account of Mark Karpelès' disclosure and does not provide Ledger official confirmation.
It is not yet clear whether the device was genuine, whether it was modified in the supply chain, or whether this was an isolated case.
The original text did not provide testing or reproduction results from an independent security organization.
The original text did not state whether any seed phrase had actually been leaked or any assets had been lost.
Related Developments
Loading event timeline…
The original text did not specify the affected batches, sales channels, or number of devices.
Related concepts
Hardware wallet
A wallet that uses a dedicated physical device to protect private keys and sign transactions.
