Ledger hardware wallets have been compromised with malicious components since December 2025, but the company delayed public disclosure despite multiple reports including one from security researcher Joe Grand.
Security & Exploits ·
Ledger has received multiple reports of compromised hardware wallets fitted with malicious components starting in December 2025, but has not issued a public warning about the issue, according to former Mt. Gox CEO Mark Karpelès. Security researcher Joe Grand reported purchasing a compromised Nano X through Lazada in Thailand on March 4, 2026; Ledger acknowledged the report and indicated it was investigating internally. A separate security incident involving devices sold by authorized Southeast Asian reseller CryptoBilis was disclosed on October 9.
The delay in public disclosure comes as tampering reports have accumulated over a period of months. Karpelès has called on Ledger to adopt more proactive communication with users, citing the rising volume of similar incidents and increasingly sophisticated attack methods. It remains unclear whether Ledger has since issued formal warnings or what broader remediation steps, if any, the company has undertaken beyond internal investigation.