Former Mt.Gox CEO Says Ledger Device Purchased From Malaysia Contained a Spy Module With a SIM Chip Despite Intact Packaging

Former Mt.Gox CEO Mark Karpelès said a Ledger Nano X hardware wallet he received from Malaysia had intact shrink-wrap packaging but contained a spy module hidden where the screen padding should have been, making it difficult to spot even after opening the casing. He shared comparison photos of the original circuit board and the implant, saying such implants have evolved from hand-soldered wiring into circuit boards that are easier to mistake for original hardware. Karpelès is requesting device photos from affected users to identify similar implants and advised following Ledger's official security guidance. Ledger has not been shown to have officially confirmed the module's functionality or any connection to recent CryptoBilis customer losses.

Hardware wallet manufacturer Ledger issued an official statement addressing recent wallet exploits, stating that its teams are actively investigating the issue. Based on current findings, Ledger confirmed that drained funds appear strictly confined to devices sold through Southeast Asian reseller CryptoBilis, with no indication of any breach within Ledger's own security infrastructure, systems, or services. Ledger advised affected users to reach out via its official support portal. — link