The cryptocurrency industry is facing renewed security concerns following reports of tampered hardware wallets, prompting major manufacturers and retailers to take precautionary action.
Today’s crypto news focuses on Ledger’s decision to suspend reseller sales across parts of Asia, Trezor’s efforts to strengthen its distribution network, and European electronics retailer MediaMarktSaturn’s removal of Ledger products.
The developments have raised important questions about cryptocurrency wallet security, supply chain vulnerabilities and the protection of investors’ digital assets.
Ledger Suspends Hardware Wallet Sales Across Southeast Asia
Cryptocurrency hardware wallet manufacturer Ledger has instructed distributors and retailers in six Southeast Asian countries and Hong Kong to temporarily halt sales of its devices.
The decision follows an investigation into reports that unauthorized modifications to certain hardware wallets may have exposed users’ sensitive recovery information.
In a statement published on X on Tuesday, Ledger confirmed that the sales suspension covers Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong.
The company emphasized that confirmed incidents remain limited to Southeast Asia. It also stated that investigators had not verified any cryptocurrency theft involving devices purchased outside the region.
Ledger is now working to identify those responsible for modifying the wallets and determine at which stage of the distribution process the tampering occurred.
The broader suspension follows an earlier request for cryptocurrency reseller CryptoBilis to stop selling and shipping Ledger devices.
The investigation became public on October 9 after reports emerged of stolen cryptocurrency allegedly linked to hardware wallets purchased through the reseller.
Trezor Reduces Authorized Resellers Amid Security Concerns
Rival hardware wallet manufacturer Trezor has announced plans to reduce its authorized reseller network following the reports involving Ledger devices.
The company described the decision as a precautionary measure and stressed that it had found no evidence suggesting its own hardware wallets had been compromised.
Trezor Chief Commercial Officer Danny Sanders explained that affected distributors would lose their authorized reseller status on January 1. However, shipments to those businesses have already been suspended.
The move follows Ledger’s confirmation that at least one device distributed by CryptoBilis contained an unauthorized hardware component.
According to Ledger, the implant was capable of collecting wallet recovery phrases and transmitting the information through cellular networks.
Such recovery phrases are essential for controlling cryptocurrency wallets. If obtained by malicious actors, they can potentially provide access to users’ digital assets.
Hardware Wallet Supply Chain Security Faces Scrutiny
The incident has intensified concerns about the security of cryptocurrency hardware wallet distribution networks.
Trezor explained that its existing security procedures can identify counterfeit devices and unauthorized firmware modifications.
However, the hardware implant discovered in the Ledger case presented a different challenge because it reportedly captured sensitive information directly from the wallet’s screen.
Blockchain investigators have estimated that potential cryptocurrency losses could range between $72 million and $86 million.
Nevertheless, Ledger has not independently confirmed those estimates, leaving the full financial impact uncertain.
In response to the security concerns, Trezor recommended that customers purchase hardware wallets directly from manufacturers rather than through third-party distributors.
The company also suggested considering multisignature wallet arrangements that use hardware devices from different manufacturers.
Such setups can provide additional protection by requiring multiple approvals before cryptocurrency transactions can be completed.
MediaMarktSaturn Removes Ledger Wallets From Stores
European electronics retail group MediaMarktSaturn has also taken action following the hardware wallet tampering reports.
The parent company of MediaMarkt confirmed that Ledger products had been withdrawn from its physical stores and online marketplaces across the countries where it operates.
A company representative described the decision as a precautionary response to the ongoing investigation.
Ledger subsequently confirmed that the retailer had coordinated the suspension with the hardware wallet manufacturer.
The decision followed a reported incident involving a customer in Germany who allegedly discovered an unauthorized hardware implant inside a Ledger device.
According to Ledger, no cryptocurrency losses had been reported in connection with the German case.
The company also stated that it had found no evidence suggesting its internal infrastructure, systems or services had been compromised.
Reports of Modified Ledger Devices Expand Beyond Asia
Additional concerns emerged after an X user identified as Johannes reported purchasing two Ledger hardware wallets from separate MediaMarkt locations in Germany.
The user alleged that both devices contained unauthorized cables and cellular communication modules.
These reports followed Ledger’s earlier investigation into cryptocurrency losses associated with devices distributed by CryptoBilis in Southeast Asia.
Ledger has since confirmed that the unauthorized implants discovered during its investigation were designed to transmit users’ recovery phrases through cellular networks.
The manufacturer is continuing to examine reports involving other distributors, although confirmed theft incidents have not been established outside Southeast Asia.
The situation highlights the importance of secure distribution channels in the cryptocurrency industry.
As hardware wallet manufacturers investigate potential supply chain vulnerabilities, investors are likely to pay closer attention to device authenticity, trusted retailers and recovery phrase security.
