Two Ledger hardware wallets alleged to contain suspected spyware; scope of European supply chain remains to be verified
BIBIBI
AT A GLANCE
Johannes said that two retail-purchased Ledger wallets were suspected of being implanted with spyware and modified; the incident remains subject to verification.
Article
Ledger The European supply chain for wallets is suspected to have been compromised; two devices have been found implanted with spyware
BlockBeats reported that October 12, crypto community user Johannes posted that two Ledger hardware wallets purchased at different MediaMarkt stores in Europe were both found to contain suspected spyware and hardware modifications, including additional cables and LTE modules, and called on Ledger to immediately recall the relevant products.
Johannes said MediaMarkt employees confirmed that the second device was not a returned product. Returned Ledger products are sent directly back to the manufacturer rather than resold as new. Store records showed that the relevant inventory came from supplier Aqipa GmbH. As the company distributes products in Europe, Johannes suspects the issue may involve broader retail inventory, but there is currently no evidence confirming that the Ledger supply chain across Europe has been broadly compromised.
Johannes said the first device had been given to relevant personnel for analysis and that he planned to send the second device to Ledger for investigation, while also publishing an unboxing video as evidence. He reminded users that if they purchase devices from merchants outside Ledger official channels, they should check whether the devices show any abnormalities.
At present, the above claims mainly come from the user's personal disclosure. The cause of the device damage, the scope of impact, and whether a supply chain attack was involved remain subject to verification by Ledger and other relevant parties.
Original link https://m.theblockbeats.info/flash/371428
Key points
01
BlockBeats reported that crypto community user Johannes disclosed in a post that two Ledger hardware wallets purchased at different MediaMarkt stores were both found to contain suspected spyware and hardware modifications.
02
The anomalies described by Johannes included additional cables and LTE modules, and he called on Ledger to immediately recall the relevant products.
03
Johannes said MediaMarkt employees confirmed that the second device was not a returned product.
04
Johannes said store records showed that the relevant inventory came from supplier Aqipa GmbH.
05
Johannes said the first device had been given to relevant personnel for analysis and that he planned to send the second device to Ledger for investigation.
06
Johannes published an unboxing video and reminded users who purchased devices from merchants outside Ledger official channels to check whether the devices showed any abnormalities.
07
The original text explicitly states that there is currently no evidence confirming that the Ledger supply chain across Europe has been broadly compromised.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Hardware wallets are used to safeguard information related to crypto assets. If additional hardware or software was installed on a device before it reached the buyer, users may be concerned about the device's security. This disclosure concerns two devices, but the assessments involving “spyware,” “hardware modifications,” and a compromised supply chain currently mainly come from Johannes's personal disclosure and have not been verified by the relevant parties.
Why it matters to readers
If the device anomalies are confirmed, this could affect users' trust in Ledger hardware wallets and unofficial retail channels; however, the available material cannot determine at which stage the issue occurred, nor can it prove that other inventory was affected.
non-Ledger official channels to purchase the relevant devices can follow Johannes's reminder in the original text and check whether the devices show any abnormalities; at this stage, the disclosure concerning two devices should not be directly interpreted as meaning that the entire European supply chain has been affected.
Risks and unknowns
Whether the devices actually contain spyware and hardware modifications remains subject to verification by Ledger and other relevant parties.
The specific cause of the device anomalies or damage remains unclear.
Whether this constitutes a supply chain attack has not been confirmed.
There is no evidence confirming whether the issue involves broader retail inventory or the European supply chain.
Related Developments
Loading event timeline…
The analysis results for the first device and the investigation results for the second device have not yet been released.
The original text provides no evidence of user key compromise or asset loss.
Claims by MediaMarkt employees, store inventory records, and the authenticity of unboxing videos have not been independently verified.
Related concepts
Hardware wallet
A wallet that uses a dedicated physical device to protect private keys and sign transactions.
Software that monitors and collects information about a user’s activities without the user’s knowledge or consent and reports it to designated parties.
