Former Mt. Gox CEO discovers suspected spy module with SIM chip embedded in a Ledger hardware wallet purchased in Malaysia.
Security & Exploits ·
A former Mt. Gox CEO reported discovering a suspected spy module containing a SIM chip inside a Ledger Nano X hardware wallet purchased in Malaysia, with the device's packaging appearing intact. The finding raises questions about the integrity of supply chains for high-value security hardware used to store cryptocurrency assets. According to reporting, the module was found despite no obvious signs of tampering or repackaging.
The discovery suggests a potential interception or compromise at some point between manufacture and sale, though the specific vector—whether at the point of sale, during shipping, or elsewhere—remains unclear. The presence of embedded communications hardware would theoretically allow remote monitoring or exfiltration of wallet data if successfully integrated into the device's operation.
It is not yet established whether the module was functional, whether other units purchased through similar channels have been affected, or what entity may have been responsible for the insertion. Ledger has not yet issued a public statement on the matter, and no independent technical analysis of the device has been disclosed.