Ledger, the French hardware wallet maker, had reportedly received multiple reports of malicious implants in its devices months before its latest security crisis became public. According to Odaily, former Mt. Gox CEO Mark Karpelès said at least two people had contacted Ledger from December 2025 onward to report tampered devices, but he did not see any public warning issued by the company.
Security researcher Joe Grand said he reported a malicious implant to Ledger on March 4, 2026. The implant was found in a Nano X purchased through Lazada in Thailand in August 2025. Ledger confirmed the finding and said it would conduct an internal investigation, but did not proactively alert customers, according to the report.
Karpelès said the growing number of reports and the increasing sophistication of the techniques involved should have prompted Ledger to act and at least warn users to remain cautious. Ledger declined to comment on how it handled Grand’s disclosure and instead referred to its public statement on X. The company’s security crisis was made public on Oct. 9 and involved crypto asset losses linked to wallets sold by Southeast Asia authorized reseller CryptoBilis.
Ledger, the French hardware wallet manufacturer, reportedly received multiple reports of malicious implants in devices months before its latest security incident was made public.
According to Odaily, former Mt. Gox CEO Mark Karpelès said at least two people had contacted Ledger from December 2025 to report that their devices had been tampered with, but he did not find any public warning issued by the company.
Security researcher Joe Grand said he reported a malicious implant to Ledger on March 4, 2026. The implant was found in a Nano X that had been purchased through Lazada in Thailand in August 2025.
Ledger confirmed the finding and said it would launch an internal investigation, but did not proactively notify customers. Karpelès said the rising number of reports and the growing sophistication of the techniques used should have led Ledger to take action and at least advise customers to remain cautious.
Ledger declined to comment on how it handled Grand’s disclosure and instead directed inquiries to its public statement on X.
Ledger’s security crisis became public on Oct. 9. The incident involved crypto asset losses tied to wallets sold by CryptoBilis, an authorized reseller in Southeast Asia. Ledger later confirmed that one affected device contained an unauthorized implant.
Trezor had also previously received reports involving tampered devices sold by unauthorized sellers.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
