WuBlockchain
Singapore police said some Ledger hardware wallets bought from local retailers contained malicious implants capable of stealing recovery phrases or private keys. At least two cases have been reported since September 10, with losses of about S$3.5 million ($2.7 million). Ledger is reviewing the affected cases, and police investigations are ongoing.
Why it matters
Hardware wallets are designed to keep sensitive credentials offline. The reported implants point to a supply-chain risk: a device may be compromised before it reaches a buyer, undermining the security users expect from cold storage.
Market impact
The reported losses raise the stakes for buyers and retailers handling hardware wallets, but the investigation has not identified how the devices were tampered with or how widely affected units were distributed. Ledger’s review and the police investigation are the key developments to watch.
Source: [Police Advisory On Tampered Cryptocurrency Hardware Wallets — Singapore Police Force](http://www.police.gov.sg/Media-Hub/News/2026/10/20261028_police_advisory_on_tampered_cryptocurrency_hardware_wallets)
Frequently asked questions
-
What could the malicious implants in the Ledger wallets steal?
Singapore police said the implants were capable of stealing users’ recovery phrases or private keys.
-
How much money was lost in the reported cases?
At least two cases have been reported since September 10, with total losses of about S$3.5 million ($2.7 million).
-
Where were the affected Ledger wallets purchased?
The wallets were purchased from local retailers in Singapore.
-
What has Ledger said about the affected devices?
Ledger is reviewing the affected cases.
-
What risk does the incident raise for hardware-wallet users?
It highlights that a hardware wallet may be compromised before reaching its user, creating a supply-chain risk for credentials kept offline.
CryptoSlate
Crypto News
CoinTelegraph