Ledger Hardware Wallet Reports Raise Supply-Chain Concerns

Reports of tampered Ledger hardware wallets have raised questions about supply-chain security and the company’s handling of early warnings. Former Mt. Gox CEO Mark Karpelès said he knew of at least two reports dating to December 2025. On March 4, 2026, security researcher Joe Grand alerted Ledger to a Nano X bought through Lazada Thailand that reportedly contained unauthorized components. Ledger acknowledged the report and said it was investigating. The issue gained wider attention on October 9, when Ledger confirmed an unauthorized implant in a device linked to reported crypto losses involving Southeast Asian reseller CryptoBilis. Grand also reported finding tampered Trezor wallets sold through unauthorized TikTok and Facebook accounts. Trezor said its assurance that it had no evidence of compromised devices applies to wallets sold by authorized resellers. The reports highlight supply-chain risks for Ledger hardware wallets and other devices sold through third-party channels, but do not establish that Ledger concealed a known threat, that its core cryptographic systems were compromised, or that all reseller devices were affected. For crypto traders and holders, this is a custody-security concern rather than a direct price signal. Buying from trusted sellers and checking devices during setup can help reduce risk.