Holy crap! The Ledger theft scandal keeps escalating: it’s not just the Nano X—even the high-end Stax has been found with a malicious module implanted!
I’ve put together a list of all the Ledger models involved so far:
Ledger Nano X: The strongest evidence.
Researchers including Mark Karpelès and Tibane Labs have publicly taken devices apart and found a Nordic nRF9151 cellular communication module, an MCU, an eSIM, and a hidden antenna. The malicious circuitry is concealed behind the screen, and the design has reportedly gone through several iterations.
Ledger Stax: The latest revelation!
The first public report of an implanted device appeared on October 11. An additional 4G/LTE module, chip, and hidden antenna were found inside the device, potentially capable of transmitting recovery phrases externally.
Ledger Flex: Community users have raised concerns about unusual device behavior and security, but no complete teardown evidence of malicious hardware on the same level as the Nano X has been found so far.
No credible cases of hardware implants directly related to this incident have been found in the Ledger Nano S, S+, or Gen5 so far.
So far, Ledger’s confirmed cases of stolen funds have centered on its authorized Southeast Asian reseller CryptoBilis, affecting Malaysia, Indonesia, and the Philippines. #Ledger确认用户设备遭植入未授权硬件 #Ledger暂停CryptoBilis销售
I’ve put together a list of all the Ledger models involved so far:
Ledger Nano X: The strongest evidence.
Researchers including Mark Karpelès and Tibane Labs have publicly taken devices apart and found a Nordic nRF9151 cellular communication module, an MCU, an eSIM, and a hidden antenna. The malicious circuitry is concealed behind the screen, and the design has reportedly gone through several iterations.
Ledger Stax: The latest revelation!
The first public report of an implanted device appeared on October 11. An additional 4G/LTE module, chip, and hidden antenna were found inside the device, potentially capable of transmitting recovery phrases externally.
Ledger Flex: Community users have raised concerns about unusual device behavior and security, but no complete teardown evidence of malicious hardware on the same level as the Nano X has been found so far.
No credible cases of hardware implants directly related to this incident have been found in the Ledger Nano S, S+, or Gen5 so far.
So far, Ledger’s confirmed cases of stolen funds have centered on its authorized Southeast Asian reseller CryptoBilis, affecting Malaysia, Indonesia, and the Philippines. #Ledger确认用户设备遭植入未授权硬件 #Ledger暂停CryptoBilis销售