Ledger also has resellers who, due to regional proximity, could also pose a threat due to potentially altered technical design.


Source


Well, I understand your logic, but on the other hand, it would also make sense for attackers to change the device inside expensive hardware wallets... after all, those Bitcoiners who have a lot of Bitcoins will prefer expensive hardware wallets.

The ability to physically open the Ledger easily has its pros and cons. It's very good for us PLEBS because we could check if there's an implant. But it's also very bad because it's easier for bad actors to put implants.

I have a Trezor Safe 3  that I couldn't physically open, and THAT makes me paranoid. What if bad actors with special tools could open it?

Maybe it was glued shut by a tamper.

I own trezor 1 these are old really old maybe 2016 direct from trezor I trust these.
I own trezor 3 this has solana staked I kind of trust it.
I own trezor 5 btc only I no longer trust this one.

My funds are in a core wallet
My funds are in trezor 1
My small funds are in the trezor 3 and 5

And some in kraken and robinhood

I leave smaller money in the trezor 5 and 3 as canaries to detect theft.

You can open the Trezor very easily but not just with your hands

In this video someone opened the Trezor to connect with the chip and recover millions recovering the PIN, you can see it was very easy to open in the first 20 seconds of the video: https://www.youtube.com/watch?v=dT9y-KQbqi4

They can glue the case again and it will look like it was never messed

72 hour update on reseller CryptoBilis incident

"To date, all confirmed cases related to the disclosed draining incident of Oct 9th, 2026, involve devices sold through the Southeast Asia reseller CryptoBilis"

https://x.com/Ledger/status/2109331538072494364?s=20

All of this is quite sickening...
And honestly, it makes me nervous and paranoid on everything which may have something to do with HWs, even if Ledger is not completely responsible of this, we are talking about a reseller which was authorized by them so they could distribute those wallets in all south Asia.

Ledger will definitely get sued because of this, let us see if victims get their money back from such lawsuit or not.

This only shows to what extent scammers and thieves are willing to go to get to steal one's stack...

Hmm, that's a surprising thing, bro. I don't know much about this, but what I found is very cool stuff to read. The nRF9151 chip used in the image you provided is an M2M SIM, and I just found that such eSIM providers won't even ask for KYC when providing them, and you can buy them in bulk. I thought these might be prepaid eSIMs, and I was thinking, how can someone manage them in bulk, even with stolen data? But these are not prepaid SIMs.

Also, these SIMs are capable of communicating globally, and any device we use can have one, and we won't even know it's there unless we check every device with detectors like the iProtect series. I have never used them, but I think we should use them if we have funds we can't afford to lose.

We can test whether our wallet is sending or receiving any spectrum using these tools. The iProtect series starts at around $500, and this alone is enough to find out if there is anything going out or coming in other than the specified signal.



Bro, at this point, we need to learn about these things and spend some extra bucks to secure what we have. Even if our portfolio is worth only $10k, we should get familiar with these gadgets. I am not advertising them, though.

This is not a true comparison and your claim that the brand is done is false. Ledger has nothing to do with this case, they are not at fault at all. The reason for which they got targeted is because they have the most clients of all of those wallets that are being sold by the site. Even if Ledger completely removes all reseller programs so that you only can buy directly from them, that would not accomplish anything because you don't understand the attack vector. This is why people are blaming the wrong party here. Even if you order from Ledger directly, there can be a supply chain attack during the transit from ledger to you. This has happened by more organized agencies and hardware in the past, and it can happen again but by criminals. If it didn't happen yet that does not mean it is not possible or that removing resellers would solve anything. This type of attack that we have seen here is a first for crypto and hardware wallets too.

The only thing that could work is if the devices were completely tamper proof on a hardware level, but I don't know how that can be done.

What is the proposed solution? Blaming the largest hardware provider for being the largest and best target for criminals doesn't make sense. Better due diligence with authorized resellers does not solve this attack.

The statement is correct, even if someone does not like Ledger it does not make this false. The lesson from the coldcard incident was that very good passphrases must always be used with hardware wallets, and the lesson here is that supply chain attacks are a big vulnerability for hardware wallets.

Recent models like Ledger Stax are also among the affected

https://x.com/wentrre/status/2109339646102778306

LTE 4G modem, E-SIM and Antenna can be found in the board