{"id":79375,"date":"2026-10-11T20:38:13","date_gmt":"2026-10-11T20:38:13","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/user-exposes-hidden-hardware-implant-in-european-ledger-wallet\/"},"modified":"2026-10-11T20:38:13","modified_gmt":"2026-10-11T20:38:13","slug":"user-exposes-hidden-hardware-implant-in-european-ledger-wallet","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/user-exposes-hidden-hardware-implant-in-european-ledger-wallet\/","title":{"rendered":"User Exposes Hidden Hardware Implant in European Ledger Wallet"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">The $93.4M Ledger hardware wallet exploit has allegedly expanded to Mediamarkt, a major European retailer.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">A customer found an earlier implant version that passes software checks, warning others to inspect devices.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Ledger claims the attack is limited to Asian reseller CryptoBilis but is now reviewing reseller controls.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<h2>New Tampered Ledger Wallets Allegedly Found Outside Asia<\/h2>\n<p>While the <a href=\"https:\/\/news.bitcoin.com\/security\/ledger-investigating-86m-drained-crypto-hardware-wallets\/\">investigation into the recent $93.4M exploit<\/a> that hit Ledger wallets sold in Asia by CryptoBilis, an authorized Ledger reseller, progresses, reports link the exploit to additional resellers in other regions.<\/p>\n<p>Ledger has only acknowledged that a hidden implant was present in one of the devices affected by the million-dollar theft. Nonetheless, X user Johannes (4, 4) has <a href=\"https:\/\/x.com\/0xJohannes_\/status\/2109240472933671125?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">presented evidence<\/a> of more implants in another Ledger wallet reportedly <a href=\"https:\/\/x.com\/0xJohannes_\/status\/2109285908079915305?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">purchased from Mediamarkt,<\/a> a German chain of stores with a presence in several European countries, including Italy, Spain, Turkey, Poland, Austria, and the Netherlands, among others.<\/p>\n<p>Johannes (4, 4), who allegedly acquired this wallet two weeks ago, pointed out that this implant seemed to be an earlier version, as it fails to hide the implant behind the device screen to make its detection difficult. Nonetheless, he explained that his wallet, while compromised, did not transfer his funds to the exploiter. <strong>\u201cEither the device didn\u2019t work, or they were waiting for a more widespread usage of the compromised devices,\u201d<\/strong> he speculated.<\/p>\n<figure id=\"attachment_855221\" aria-describedby=\"caption-attachment-855221\" style=\"width:1280px\" class=\"wp-caption aligncenter\"><figcaption id=\"caption-attachment-855221\" class=\"wp-caption-text\">A hardware implant found in Ledger wallet. Source: Johannes (4,4) X account.<\/figcaption><\/figure>\n<p>Former Mt Gox CEO Mark Karpeles added that the antenna in this wallet read \u201cEurasian version,\u201d hinting at different versions depending on the mobile frequencies used in each region.<\/p>\n<p>Before, Mark Karpeles <a href=\"https:\/\/news.bitcoin.com\/security\/ledger-wallet-mystery-deepens-as-suspected-losses-hit-93-4m\/\">documented similar implants present in wallets sourced from Malaysia<\/a>, where Cryptobilis is based. This new report expands the exploit to wallets offered in Europe, potentially exposing more customers to this attack vector.<\/p>\n<p>Finally, Johannes (4, 4) recommended that Ledger owners who sourced their wallets from resellers open their devices and not trust Ledger\u2019s software checks, as similar cases have appeared in other regions. All tampered devices passed Ledger software security checks, prompting customers to use them without concerns.<\/p>\n<p>In <a href=\"https:\/\/x.com\/Ledger\/status\/2109331538072494364?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">its most recent update<\/a>, Ledger clarified that all confirmed cases affected by this exploit were limited to devices sold through CryptoBilis, encouraging affected users to <strong>\u201creach out to Ledger Support through official channels and file complaints with their local law enforcement authorities.\u201d<\/strong><\/p>\n<p><strong>\u201cWe are continuously improving that work now and events like this strengthen our resolution: reviewing authorized reseller controls, advancing <\/strong><strong>hardware protections, and cooperating with authorities,\u201d<\/strong> Ledger concluded.<\/p>\n<p>At the time of writing, Ledger Support has not addressed the swirling reports concerning alleged tampered devices stemming from European resellers.<\/p>\n<div class=\"not-prose my-3 lg:my-4\">\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden md:flex md:flex-row md:gap-3 lg:hidden\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/ledger-confirms-hidden-hardware-implant-in-affected-users-wallet\/\"><img alt=\"Ledger Confirms Hidden Hardware Implant in Affected User\u2019s Wallet\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/div>\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden lg:flex lg:flex-row lg:gap-4\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/ledger-confirms-hidden-hardware-implant-in-affected-users-wallet\/\"><img alt=\"Ledger Confirms Hidden Hardware Implant in Affected User\u2019s Wallet\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fledger-confirms-hardware-implant-as-93m-wallet-mystery-grows-150x150.png&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/p>\n<div class=\"flex min-w-0 flex-1 flex-col justify-center gap-2\">\n<p class=\"m-0 line-clamp-2 text-base leading-[1.3] !text-[#67656E]\">Ledger confirmed Saturday, Oct. 10, 2026, that a hardware wallet belonging to one affected customer contained an unauthorized implant, lending\u2026<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/security\/user-exposes-hidden-hardware-implant-in-european-ledger-wallet\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways The $93.4M Ledger hardware wallet exploit has allegedly expanded to Mediamarkt, a major European retailer. A customer found an earlier implant version that passes software checks, warning others to inspect devices. Ledger claims the attack is limited to Asian reseller CryptoBilis but is now reviewing reseller [&hellip;]<\/p>\n","protected":false},"author":15,"featured_media":79376,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79375"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=79375"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79375\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/79376"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=79375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=79375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=79375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}