Ledger Requests Device Sales Halt in Asian Markets and Europe Following Tampering Reports
Ledger has asked resellers in seven Asian markets and Hong Kong to temporarily cease sales of its devices. This follows reports, including from a German customer, of suspected tampering and a significant alleged fund drain, prompting an inv
What happened
Ledger, a prominent hardware wallet manufacturer, has issued a request to resellers in seven Asian markets and Hong Kong to halt the sale of its devices. This directive comes amidst reports of suspected tampering with Ledger products.
The company's request for resellers to pull devices from shelves is linked to an alleged $86 million drain, as well as a specific report from a customer in Germany. This customer reportedly discovered an 'implant' within a device. Following this incident, the European electronics chain MediaMarkt Saturn has also reportedly ceased its sales of Ledger products.
Ledger has initiated an investigation to ascertain the origin point of the suspected tampering. The request for sales cessation is intended to allow this investigative work to proceed.
Why it matters
The integrity and security of hardware wallets are critical for cryptocurrency users, as these devices are designed to safeguard digital assets offline. Reports of device tampering, particularly before reaching the end-user, directly challenge the core promise of hardware wallet security.
Such incidents can erode user confidence in the supply chain of hardware security devices. The halt in sales by a major manufacturer and retailers indicates a serious concern about potential vulnerabilities introduced during distribution or handling. This situation highlights the importance of vigilance in the acquisition and verification of security hardware.
Safety notes
For users of hardware wallets, it is crucial to purchase devices directly from the manufacturer or authorized, reputable resellers. Upon receiving any hardware wallet, users should always meticulously inspect the packaging for any signs of tampering, such as broken seals, re-sealed boxes, or discrepancies in the device's physical appearance. It is also advised to follow the manufacturer's official setup instructions carefully and never enter recovery phrases into any software or website, only directly onto the device itself as prompted by official setup procedures. Users should be aware that genuine hardware wallets typically generate recovery phrases offline and should never come pre-configured with a phrase.