Ledger Hardware Wallet Supply Chain Attack: $86 Million Stolen!
Ledger officially just issued a warning: an investigation is underway into an asset theft incident involving Southeast Asian users, with the related devices purchased from dealers.
Official advice: If you bought a Ledger hardware wallet in the last 90 days, don’t rush to use it yet.
How big is the loss?
On-chain investigator Specter estimates the stolen funds come from hundreds of wallets on Bitcoin $BTC, Ethereum $ETH, and the TRON network, totaling over $86 million. Security researcher tanuki42 previously estimated over $72 million, and the number is still rising.
Why can hardware wallets be compromised?
This is not a software vulnerability; it’s a physical supply chain attack.
Hardware security experts demonstrated a tampered hardware wallet: a miniature spy chip implanted inside, connected on the SPI bus between the secure element and the OLED screen.
How it works: it passively intercepts the mnemonic phrase displayed on your screen, “reads” it using pattern recognition, then sends the mnemonic directly out via a built-in 4G module and eSIM. The entire process bypasses your computer and triggers no software alarms.
The security of hardware wallets has never been just about software. Any link in the chain from factory to your hands can be tampered with.
Disclaimer: OKX Orbit content is provided for informational purposes only. Learn more
