The $90 Million Crypto Wallet Breach: How Spyware Turned Ledger’s Security Promise Into a Supply-Chain Nightmare

Ledger is reviewing how its hardware wallets reach consumers after tampered devices were linked to an estimated $90 million in cryptocurrency theft. The incident exposes a critical weakness in digital asset security: even a device designed to protect private keys can be compromised before it reaches its owner.

The cryptocurrency industry has spent years encouraging investors to move their assets away from exchanges and into hardware wallets. The principle is straightforward: keep the keys that control your cryptocurrency offline, protect them from malicious software and authorise transactions through a dedicated physical device.

But what happens when the hardware designed to protect those assets has itself been secretly modified?

That question is now confronting Ledger, the French manufacturer of cryptocurrency hardware wallets, after an investigation linked tampered devices to a major cryptocurrency theft. The affected devices reportedly contained unauthorised electronic implants capable of capturing users’ recovery phrases and transmitting them to criminals.

The estimated losses have reached approximately $90 million, although the final amount remains subject to verification.

Ledger is reviewing its sales policies, distribution procedures and anti-tampering protections following the incident. The company has also asked certain resellers in Southeast Asia and Hong Kong to suspend sales while the investigation continues.

The significance extends beyond one manufacturer. The incident demonstrates how criminals can attack the physical journey of a security product rather than attempting to defeat its software directly.

For cryptocurrency users, that distinction offers little comfort if the outcome is the same: the loss of funds they believed were protected.

How the alleged hardware attack worked

Ledger devices are designed to protect the cryptographic keys used to control digital assets. During the initial setup of a new wallet, the device generates or displays a recovery phrase, commonly consisting of 24 words. That phrase can be used to restore access to the associated wallet.

Anyone who obtains the complete recovery phrase may be able to recreate the wallet on another compatible device and transfer its assets. They generally do not need to possess the original hardware wallet or know its PIN.

In the incident under investigation, some devices reportedly contained unauthorised hardware implants capable of capturing recovery phrases during setup and transmitting the information through a mobile connection.

Reports described concealed electronic components and cellular connectivity, including an eSIM. The alleged implant operated alongside the device’s existing hardware rather than simply replacing its main software.

The reported mechanism is straightforward:

1. A modified hardware wallet reaches a customer through the distribution chain.
2. During setup, the customer generates or displays a recovery phrase.
3. The hidden component captures the sensitive information.
4. The information is transmitted to an external recipient.
5. Criminals use the captured phrase to gain control of the associated wallet and move its assets.

The customer may follow the normal setup procedure and believe the device is functioning correctly. The hidden component can operate independently of the software the user sees.

This is particularly troubling because the customer does not necessarily have to download a malicious application, click a phishing link or deliberately disclose the recovery phrase. The alleged attack exploits a moment when the user is doing precisely what the wallet instructs them to do: secure their account by recording the recovery words.

The supply chain is the critical vulnerability

The investigation has focused on devices sold through CryptoBilis, a third-party reseller operating in Southeast Asia.

Ledger has indicated that the confirmed cases under investigation were associated with devices sold through that reseller. The company has also distinguished the physical tampering incident from a confirmed compromise of its internal systems or wallet software.

That distinction matters. There is no basis for concluding that Ledger deliberately enabled the theft or that every product it sells has been compromised.

However, the incident raises a difficult question about the security of products as they move from manufacturers to consumers.

A manufacturer may design a secure device, control its software and test its components. But a product can potentially be modified after manufacture and before it reaches the customer. Warehouses, distributors, resellers and other intermediaries can become points of exposure if appropriate safeguards are absent or ineffective.

The precise circumstances in which the affected devices were modified, and the identity of those responsible, remain important questions for investigators.

The discovery of a hardware implant does not, by itself, establish who introduced it or prove that every device distributed through the same channel was compromised.

Nevertheless, the incident demonstrates a broader security principle: trust in a hardware product must extend beyond its original design to the integrity of the entire supply chain.

Why an authenticity check may not be enough

Hardware-wallet manufacturers use security mechanisms intended to help users verify that a device is genuine and that its software has not been replaced with an unauthorised version.

Such checks are valuable, but they cannot automatically establish that every physical component inside a device remains untouched.

The reported Ledger attack highlights the difference between two security questions:

• Is this an authentic product running authorised software?
• Has the physical product been modified in a way that compromises its security?

A device could pass certain software-authentication checks while still containing an unauthorised physical component that those checks were not designed to detect.

That does not make authentication checks useless. It means their scope and limitations must be understood.

Manufacturers may need to combine software verification with stronger physical inspection, component traceability, tamper-evident packaging, supply-chain monitoring and more rigorous controls over returned or resold products.

No single measure can eliminate every risk. But security claims must reflect what the verification process actually establishes.

Why the estimated $90 million matters

The financial scale of the incident has attracted attention, but the reported amount should be treated as an estimate rather than a final audited loss.

Blockchain investigators have traced substantial cryptocurrency outflows associated with the affected wallets. Estimates have placed the losses at approximately $90 million or more, while a portion of the stolen stablecoins was reportedly frozen.

These figures matter for two reasons.

First, they illustrate how a single compromise of sensitive recovery information can affect many individual wallets. Criminals do not necessarily need to defeat each wallet separately if they have already obtained the recovery phrases.

Second, tracing cryptocurrency does not automatically mean recovering it. Blockchain records can help investigators follow transactions, identify clusters of addresses and flag funds associated with theft. But stolen assets may move through multiple wallets and services, and not every transaction can be reversed.

Freezing a portion of assets held by a centralised stablecoin issuer is also different from recovering cryptocurrency that has moved beyond the issuer's control.

Victims therefore face uncertainty not only about how much has been stolen but also about whether meaningful recovery will be possible.

Who is responsible: the manufacturer, reseller or criminal?

A security incident involving a third-party reseller creates difficult questions about responsibility.

The criminals who secretly modify devices and steal cryptocurrency bear responsibility for their actions. But a manufacturer's response cannot end with identifying the distribution channel through which the devices passed.

Ledger's review of reseller controls and anti-tampering protections is therefore significant. The company must determine whether its safeguards were adequate, whether the distribution arrangements exposed customers to avoidable risks and how similar incidents can be prevented.

Customers have legitimate questions:

• How were the modified devices able to reach consumers?
• Which security checks were performed before distribution?
• What controls applied to the reseller and its suppliers?
• Could the tampering have been detected before the devices reached customers?
• How many potentially affected devices were distributed?
• What assistance or compensation, if any, will be available to customers who can demonstrate losses connected to the incident?

These questions should not be mistaken for proof of corporate wrongdoing. Responsibility depends on the evidence, contractual arrangements, applicable law and the findings of the investigation.

But they are legitimate questions for a company whose business depends on customers trusting its products to protect valuable assets.

A manufacturer cannot control every criminal act in the distribution chain. It can, however, evaluate whether its safeguards were proportionate to the risks and explain how those safeguards will change.

What Ledger and the wider industry need to change

The incident should prompt a broader review of how security hardware is manufactured, distributed, authenticated and supported.

First, strengthen supply-chain traceability.

Manufacturers and distributors should maintain reliable records of device batches, suppliers, shipments, returns and resale activity. When a compromised unit is discovered, investigators need to determine where it travelled and which other products may have passed through the same channels.

Second, tighten reseller oversight.

Authorised status should involve more than permission to sell a product. It should include documented handling procedures, controls over third-party suppliers, appropriate storage and shipping safeguards, and a process for investigating suspicious devices.

Third, improve physical tamper detection.

Manufacturers should assess whether changes to circuit boards, displays, enclosures or communication components can be identified through practical inspection and testing. Tamper-evident packaging may help reveal interference, although packaging alone cannot prove that the device inside is secure.

Fourth, strengthen controls over returned products.

Returned or refurbished devices present particular risks if their history is uncertain. Manufacturers and distributors should prevent potentially compromised units from re-entering the market without adequate inspection and clearance.

Fifth, publish clear incident guidance.

Customers need to know whether their purchase channel is affected, how to recognise potentially compromised devices, where to report suspicious products and what immediate steps to take if they have already used one.

Sixth, make independent security testing part of the process.

Independent researchers can examine whether verification systems adequately cover physical tampering and whether manufacturers' security claims match real-world conditions. Responsible disclosure channels can help companies identify weaknesses before criminals exploit them at scale.

These measures would not make hardware wallets invulnerable. They would, however, make it harder for unauthorised components to pass unnoticed through the distribution process.

What cryptocurrency users should do now

Users who bought a Ledger device through CryptoBilis or another channel mentioned in the investigation should take the warnings seriously.

Customers who have not yet set up a potentially affected device should avoid initialising it until they have checked the manufacturer's official guidance. Users who have already used a potentially compromised device should follow official instructions for moving their assets to a secure wallet with a newly generated recovery phrase.

Several precautions are especially important:

• Verify the purchase channel. Check the manufacturer's official website and security announcements to determine whether the seller or device batch is affected.
• Never enter an existing recovery phrase into a suspicious device. A recovery phrase is effectively the master key to the assets it controls.
• If a wallet may be compromised, prioritise securing the funds. Use a separate, trusted device and a freshly generated recovery phrase, following official instructions. Simply transferring the old recovery phrase to another device will not solve the problem if that phrase has already been exposed.
• Keep the new recovery phrase private. Do not photograph it, store it in an ordinary cloud account or enter it into a website or support chat.
• Contact official support through verified channels. Be alert to impostors who may exploit the incident by offering fake recovery services or requesting recovery phrases.
• Preserve evidence. Keep purchase records, device packaging and transaction details that may help the investigation.

Users should also understand that a hardware wallet does not store cryptocurrency in the same way that a physical wallet holds banknotes. The assets are recorded on their respective blockchains; the device protects the credentials used to control them.

That is why a compromised recovery phrase can remain dangerous even after the original device has been disconnected or discarded.

A warning for Nigeria's growing cryptocurrency market

The incident has particular relevance for cryptocurrency users in Nigeria, where digital assets are used for trading, savings and cross-border transfers.

Consumers purchasing security hardware online or through informal retail channels may find it difficult to establish a product's full distribution history. A device advertised as new, genuine or discounted may still require careful verification of its seller and provenance.

This does not mean Nigerian buyers should assume that locally sold Ledger devices are compromised. The investigation has not established that. It means consumers should avoid treating a seller's claim of authenticity as a substitute for checking official guidance and purchasing through trustworthy channels.

The same lesson applies to other security-sensitive products, including smartphones, networking equipment and authentication devices: the integrity of a product depends partly on the chain through which it reaches the user.

Nigeria's cryptocurrency community should also be cautious about recovery scams. Following a major theft, fraudsters may pose as investigators, exchange representatives or technical support agents. No legitimate recovery process should require a customer to disclose a secret recovery phrase to an unknown person.

For users who cannot afford to lose their holdings, basic operational security is essential.

Security is a chain, not a label

The Ledger case challenges one of the cryptocurrency industry's most familiar assurances: that moving assets into a hardware wallet makes them safe.

Hardware wallets remain an important security tool, and this incident does not establish that the entire category is unsafe. It demonstrates that a secure design can be undermined if a product is physically modified somewhere between manufacture and use.

That is why the response must go beyond telling consumers to be more careful. Users have a responsibility to protect their recovery phrases and verify their purchases, but manufacturers and distributors also have a responsibility to build systems that make covert tampering harder to introduce and easier to detect.

Ledger's review will be meaningful only if it produces demonstrable improvements in device integrity, reseller oversight, traceability and customer protection.

The ultimate test is not whether the company can reassure customers that its original software remains secure. It is whether customers can reasonably trust that the physical device they receive has not been secretly altered.

In cryptocurrency, control of the keys means control of the money. If criminals can steal those keys by tampering with the hardware before it reaches its owner, the security promise begins to fail before the customer even opens the box.