Ledger Implant Update Leaves Users Suspect Retailer Out

Background

The Ledger implant probe still points at a single seller, Southeast Asian reseller CryptoBilis, according to an October 13 update. Users hit back within minutes, claiming tampered devices also surfaced at MediaMarkt, a major European electronics chain.

Investigation

Ledger says it is reviewing reports of implants in other signers and locations. However, its update named no retailer beyond CryptoBilis, and critics read that silence as downplaying. Is the Ledger Implant Problem Bigger Than One Reseller?

Update from Ledger Donjon

According to Ledger Donjon, the company's in-house security team, the implant reads the recovery phrase off the screen during setup. It then sends the 24 words out over a cellular connection.

Criticism

Several users argue the problem reaches beyond Asia. Replies repeatedly asked why the update left out MediaMarkt and other European locations. One user claimed the Ledger supply chain is compromised in Europe as well.

Response

Ledger has not confirmed any case outside CryptoBilis. Who Covers the Losses From Tampered Signers?

Ledger's Response

Ledger asks drained users to contact Support so it can include their cases, and to file a police report. However, its update did not address reimbursement. Ledger also has not confirmed how many users lost funds or the total value.

Verification

Ledger's Genuine Check, a built-in authenticity test, verifies the security chip but not every component around it. As a result, a hidden spy chip could still pass it.