Ledger Criticized for Delayed Response to Hardware Implants

Ledger, the French hardware‑wallet maker, was warned of malicious implants in its Nano X devices as early as December 2025, yet it failed to issue a public warning before a security crisis surfaced on Oct 9, 2026. Former Mt. Gox CEO Mark Karpelès said he knows at least two individuals who contacted the company about tampered devices months before the incident, but no public advisory was found.

Early Reports

• Security researcher Joe Grand alerted Ledger on March 4, 2026 about a malicious implant in a Nano X bought on Lazada Thailand in August 2025. Ledger acknowledged the report and said it was investigating internally, but did not proactively warn customers.
• Vietnamese crypto educator Tai Zen also reached out in December 2025 with concerns over a suspected hardware implant.

Ledger’s Response

Ledger confirmed that one device sold through reseller CryptoBilis contained an unauthorized implant, but declined to comment on Grand’s disclosure, directing inquiries to its public statements on X. The company has not released a broader warning to users.

Wider Market Impact

Other manufacturers face similar challenges. OneKey removed its reseller listings on Lazada pending stricter checks, citing difficulty for buyers to differentiate authorized sellers. Trezor reported counterfeit wallets from unauthorized sellers on TikTok and Facebook, emphasizing that early warnings help improve security checks.

Key facts

• Reports of tampered Ledger devices date back to Dec 2025.
• Ledger acknowledged a March 2026 report but gave no public alert.
• One affected device was confirmed to contain an unauthorized implant on Oct 9, 2026.
• Marketplace sellers like “LedgerXXX” on Lazada are not authorized resellers in Thailand.
• Competitors OneKey and Trezor are tightening reseller verification after similar incidents.