The Singapore Police Force confirmed that the affected devices were sold through local retail outlets, including locations at Changi Airport and VivoCity. Preliminary findings indicate these wallets contained unauthorized hardware components capable of transmitting sensitive keys via LTE connections, effectively bypassing standard security measures. Because the malicious implants operated independently of the device's Secure Element, the standard operating system remained unaware of the breach.
Ledger responded to the discovery by suspending sales across Southeast Asia, including markets in Malaysia, Indonesia, Vietnam, and Hong Kong. The manufacturer has distanced itself from the tampering, stating that its own distribution channels remain secure and that the compromised units entered the market through third-party resellers like CryptoBilis. Customers who purchased Ledger devices in the region within the last 90 days are being urged to avoid initializing them and to migrate assets to new hardware with freshly generated recovery phrases. While global estimates of losses linked to these tampered devices have reached US$86 million, Ledger maintains it cannot verify the total impact due to the decentralized nature of the thefts.

Comments (0)
No comments yet. Be the first!