Allegations have emerged that hackers planted covert spy chips inside store-bought Ledger hardware wallets, enabling the theft of crypto recovery phrases and exposing users to losses reportedly totalling up to $93 million, while South Korea has separately moved to block 27 crypto platforms from operating in the country.
What the Ledger spy-chip allegations claim
According to reporting by Tom’s Hardware, wallets sold through retail channels were found to contain implanted eSIM and LTE modules that were not part of the original Ledger design. These components allegedly allowed malicious actors to exfiltrate seed phrases — the master keys to a wallet — remotely, without any visible sign of tampering. For related coverage, see BIS Tests On-Chain Verification Proof-of-Concept on XRP Ledger.
The same report places the claimed financial exposure at up to $93 million and counting. It is not yet established how many devices were affected, whether losses are confirmed rather than projected, or at which point in the supply chain the hardware modifications were introduced. For related coverage, see SWIFT Blockchain Ledger Tests With Citi, MUFG for 24/7 Payments.
Ledger has not, based on the available reporting, issued a public statement confirming the compromise. Consumers who purchased a hardware wallet from a third-party retailer rather than directly from Ledger’s official store are advised to verify device integrity before use and to consult Ledger’s official security guidance before entering a recovery phrase into any device. For related coverage, see Gemini Activates Native XRP Ledger Transfers for Singapore Users.
Why supply-chain attacks are especially dangerous
Hardware tampering attacks are difficult to detect because the wallet may function normally while silently transmitting seed data. A user verifying the device via its screen or companion app would see no anomaly. The alleged use of eSIM modules suggests connectivity was embedded to allow exfiltration without the user’s phone or computer being involved at all. For related coverage, see Stablecoin Remittance Cost in Southeast Asia: FX, Fees, Payout, and Failure Risk.
For the roughly 700 million people across Southeast Asia who increasingly rely on self-custody tools, this allegation is a reminder that purchasing hardware wallets from unofficial channels carries risks that software security alone cannot address. Regional exchanges such as Indodax, Tokocrypto, and Coins.ph have long encouraged users toward exchange custody; incidents like this tend to reinforce that preference in markets where counterfeit hardware is common. For related coverage, see 美国比特币ETF净流出788枚BTC，以太坊ETF流出29926枚ETH.
South Korea moves against 27 crypto platforms
South Korea has reportedly moved to block access to 27 crypto platforms, according to the sourced headline. The specific platforms named, the regulatory authority responsible, and the legal grounds for the action have not been confirmed in the available evidence. The scope of the measure — whether it targets domestic operators, foreign exchanges, or both — also remains unverified.
South Korea is one of the most active crypto regulatory environments in Asia, and platform-access restrictions typically carry immediate implications for Korean retail investors who use those services. Users with funds on any of the affected platforms should monitor official notices from the relevant authority and check whether withdrawal access remains available.
The development is notable in the context of broader regional regulatory tightening. South Korea’s Financial Intelligence Unit has previously required foreign virtual asset service providers to register locally or face blocking; this latest reported action may fall under that framework, though that connection is not confirmed by the available reporting.
TLDR Keypoints
- Allegations reported by Tom’s Hardware claim hackers implanted eSIM and LTE chips into store-bought Ledger hardware wallets to steal seed phrases, with unconfirmed losses cited at up to $93 million; no device count or confirmed loss figure has been independently verified.
- South Korea has reportedly blocked 27 crypto platforms; the platforms, the regulating body, and the legal basis for the action have not been confirmed in the available evidence.
- Users should rely on official statements from Ledger and the relevant South Korean authority before taking any action, and should source hardware wallets only from verified, official channels to reduce supply-chain risk.
Additional source references: source document 1.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
