The crypto wallet was genuine. The chip someone added to it was not.

A hardware wallet is supposed to be the careful option. You keep the keys offline, on a small device in a drawer, precisely so that nothing on your PC can reach them. That assumption held right up until somebody opened the case and soldered in a passenger.

Ledger confirmed on 12 October that devices sold through CryptoBilis, a reseller operating across Malaysia, Indonesia and the Philippines at close to half the usual price, had been physically tampered with before they reached buyers. Two versions of the implant turned up. One was hidden inside a slimmed-down replacement battery, the other tucked beneath the OLED screen. Both carried an ST microcontroller and an eSIM module about two millimetres square. The chip watched what the screen displayed and which buttons were pressed, picked the 24 word recovery phrase out of the setup process, and sent it to the attackers over a mobile data connection. No internet, no PC, no malware involved at any point.

On-chain researchers put the damage at roughly 93 million dollars across more than 300 wallets, and Tether has frozen 10 million dollars of USDT tied to it. Ledger says its software, its secure element and its transaction signing were never compromised, which is true and not much comfort, because the company also acknowledges that its Genuine Check cannot detect an added implant while the original secure element is intact. Anyone holding a device from that reseller is told not to set up an unused one, and to move funds to a new device with a freshly generated phrase.

The lesson travels further than crypto. Hardware bought at a suspicious discount from a seller you cannot identify is hardware you are trusting completely. On a Windows PC the equivalent risk is usually software rather than silicon, and Tendvane's safety check goes through what is installed and flags the things that arrived without being asked for.